Chainalysis reported on November 6 that it has begun a phased restoration of its Know Your Transaction (KYT) and address‑screening products after a recent cyberattack. The restoration follows several days of service restrictions and a series of disclosures about the breach.
Timeline of disclosures
On October 30, Chainalysis announced the detection of unauthorized activity affecting its internal systems, stating that no evidence of access to sensitive materials had been found at that time. An update on November 4 expanded the scope, revealing that user information—including names, usernames, password hashes and live tokens—had been exposed to an attacker.
Impact on services
Abnormal activity around the KYT and other screening tools led Chainalysis to take additional products offline. The company said it had no evidence that investigation content or attribution data had been accessed or altered.
Customer guidance
Customers were instructed to submit trusted IP addresses for allowlisting, prepare to reset passwords, and rotate API keys as access is restored. Chainalysis emphasized that while password hashes are not plaintext passwords, their exposure poses security risks depending on how they were generated. Live tokens could also allow continued access while valid.
Operational considerations
Organizations using Chainalysis services are advised to follow the vendor’s instructions and conduct their own security assessments. Users should avoid clicking unexpected reset links in unsolicited emails and should sign in through verified service addresses.
Restoration outlook
Chainalysis indicated that restoration will continue as enhanced security controls are validated, but it had not confirmed full restoration of all affected products as of the November 6 update. The firm acknowledged the seriousness of the incident and is proceeding with a controlled recovery.
