Chainalysis confirms names, usernames, password hashes and live tokens for all users were exposed, Reactor and KYT taken offline
Chainalysis confirmed exposure of names, usernames, password hashes and live tokens for all users; reporting indicates KYT, Reactor and Address Screening were taken offline.
- Urgency
- L4
- 88
- 80
- 20
- 100
- 85
At a glance
Chainalysis said an intrusion exposed names, usernames, password hashes and live tokens for all users. Reporting also states that customer-facing services KYT, Reactor and Address Screening were taken offline.
- Chainalysis confirmed exposure of names, usernames, password hashes and live tokens for all users; reporting indicates KYT, Reactor and Address Screening were taken offline.
CHRONOS Wire · November 6 · Alert 12
What happened
Chainalysis says an attacker accessed customer data including names, usernames, password hashes and live tokens for all users. Reporting also says customer-facing services KYT, Reactor and Address Screening were taken offline.
Why it matters
Company confirmation that live tokens and password hashes for all users were exposed and reporting that key services were taken offline indicates an active, high-impact incident affecting all customers; monitor vendor updates closely.
CHRONOS Bottom Line
Chainalysis confirmed exposure of names, usernames, password hashes and live tokens for all users, and reporting indicates KYT, Reactor and Address Screening were taken offline.
Full detail
What changed
Chainalysis publicly confirmed that the intrusion exposed names, usernames, password hashes and live tokens for all users, and reporting states that customer-facing services KYT, Reactor and Address Screening were taken offline.
What is genuinely new
Public confirmation that live tokens and password hashes for all Chainalysis users were exposed, and reporting that KYT, Reactor and Address Screening were taken offline.
Detailed analysis
Public reporting quoting Chainalysis states that names, usernames, password hashes and live tokens for all users were exposed. A separate report states the intrusion forced KYT, Reactor and Address Screening offline. Technical specifics about the tokens, whether they remain valid, the hashing algorithms used, and the number of affected accounts are not provided in the cited excerpts.
U.S. Impact
U.S. Impact assessment pending.