[Wu Blockchain News] Chainalysis: Names, Usernames, Password Hashes, and Valid Tokens of All Users Were Exposed; Some Plaintext Passwords Also Leaked

Chainalysis disclosed that a security breach exposed the names, usernames, password hashes, and valid authentication tokens of all its users, with some plaintext passwords also leaked through a separate attack vector. The blockchain analytics firm suspended KYT transaction monitoring, address screening, and login services after detecting abnormal activity, and is requiring all users to reset passwords and rotate API keys where necessary. The expanded disclosure follows the company's October 30 initial notice, which had confirmed only limited customer identity access and said there was no evidence passwords or session tokens had leaked; the attacker was described as using offensive AI agent technology. The incident matters because Chainalysis's KYT and address-screening tools are widely relied on by exchanges, funds, and compliance teams for AML and sanctions monitoring, so the service suspension and credential resets could ripple across customers' transaction workflows. What to watch next is whether Chainalysis restores full KYT and screening services without disruption and whether the token and password exposures lead to any unauthorized account access or API key misuse.