Wu Blockchain learned that blockchain analytics firm Chainalysis disclosed in an updated security incident notice that the names, usernames, password hashes, and valid authentication tokens of all users had been exposed to attackers. Plaintext passwords of some customers were also leaked through a separate attack technique. After detecting unusual activity, the company suspended its KYT transaction monitoring, address screening, and login services, and required all users to reset their passwords and, where necessary, replace their API keys. Chainalysis first disclosed on October 30 that it had been breached by hackers using offensive AI agent technology. At the time, it confirmed only that some customers’ identity information had been accessed and said it had found no evidence that passwords or session tokens had been leaked.
