Chainalysis Breach Exposes Passwords and Tokens for All Users, Forcing Service Shutdowns

The company said it discovered the intrusion on Monday and published its latest update Wednesday, Nov. 4, at 11 p.m. ET, confirming the exposure affected its full user base rather than a subset. The breach matters because Chainalysis is a key data provider for exchanges, banks and government agencies, so service outages can ripple across compliance and investigation workflows that depend on its analytics. Password hashes and live authentication tokens are at issue, meaning users may face forced re-login and token revocation even where passwords themselves remain hashed. What to watch next is how quickly Chainalysis restores the shuttered services and whether it details the scope of token invalidation and any required credential resets.