The facts
Chainalysis said names, usernames, password hashes and live tokens for all users were exposed to the attacker during the incident. [1][2]
The company said on 7 November that its KYT, Address Screening and Reactor services had returned with enhanced security, while Data Solutions restoration was continuing. [1]
Chainalysis said it had no evidence investigation data were accessed or attribution data manipulated; The Record reported some customers’ KYT accounts appeared to have been accessed. [1][2]
The Record reported the company serves more than 1,500 customers, including law-enforcement, national-security, finance and cryptocurrency organizations. [2]
Relevant context
Chainalysis provides blockchain-analysis services used by cryptocurrency businesses and public-sector customers. [1][2]
Still unconfirmed
- Whether the attacker used, copied or redistributed exposed live tokens or password hashes and the precise remediation status.
- Which individual customers’ accounts were accessed and what data each account exposed.
- The identity of the attacker and the complete scope of affected systems.
Sources
References support the numbered facts above. Source checks: 7 Nov 2026, 20:57 UTC.
The company’s incident update is the primary source for the exposure and restoration statements. The Record and TechRadar independently report the disclosure and service disruption. The article does not infer that investigations data were taken or attribution records changed.
- Security incident update: October 30
Chainalysis · Primary source · 7 Nov 2026
Opened the company’s updated incident notice. It says names, usernames, password hashes and live tokens for all users were exposed, identifies services restored by 7 November and says it has no evidence investigations were accessed or attribution data manipulated.
- Chainalysis confirms all users hit by agentic cyberattack
The Record · Reporting · 6 Nov 2026
Opened the report on the expanded user-data disclosure, service outage and the company’s statements about apparent access to some KYT accounts.
- Chainalysis admits all users affected in major data breach
TechRadar · Reporting · 6 Nov 2026
Opened a separate report on exposed user information and service disruption; the company’s investigation-data caveat is preserved.