Chainalysis expands breach disclosure to hashes and live tokens
Chainalysis confirmed that password hashes and live tokens were exposed in a cyberattack that disrupted several of its monitoring and investigation tools.
Chainalysis confirmed that password hashes and live tokens were exposed in a cyberattack that disrupted several of its monitoring and investigation tools. This is an original Token Times brief synthesising 2 outlets (Crypto Economy, Cointelegraph), plus live market data, as of Fri, 06 Nov 2026 14:00:01 UTC.
The disclosure affects customer account security and indicates that the incident reached beyond the non-sensitive data initially identified. Taking investigation products offline also reduced some of Chainalysis’s operational capabilities while the incident was addressed.
- Three outlets report hashes and live tokens were exposed.
- Initial disclosure described only non-sensitive customer data.
- Abnormal activity prompted Chainalysis to take products offline.
- Bitcoin fell 4.70%; market sentiment registered Fear at 28.
Crypto Economy, Crypto.news and Cointelegraph all report that Chainalysis confirmed password hashes and live tokens were exposed during a cyberattack, contradicting the company’s initial description of the incident as limited to non-sensitive customer data. Crypto Economy adds the most operational detail, distinguishing a separate on-path attack affecting a subset of customer passwords and saying abnormal activity led the company to take KYT, address-screening tools and additional products offline. Crypto.news cites a November 4 security update and characterizes the disruption as affecting several investigation and transaction-monitoring services, while Cointelegraph emphasizes the reversal of the earlier disclosure; no outlet cited here provides conflicting figures.
Blockchain analytics firm Chainalysis has expanded its account of a cyberattack after initially indicating that only non-sensitive customer data had been accessed. Crypto Economy, Crypto.news and Cointelegraph report that the revised assessment includes names, usernames, password hashes and live tokens associated with users. The wider disclosure changes the nature of the incident from an apparently limited data-access event to one involving authentication-related material and active tokens.
The disruption affected services used to investigate suspicious activity and monitor transactions. Crypto Economy says abnormal activity prompted Chainalysis to take its KYT tools, address-screening products and additional offerings offline. Crypto.news similarly describes several investigation and transaction-monitoring services as unavailable following the cyberattack, although its summary does not provide a duration, cause for each individual outage or evidence about the scale of operational disruption.
Crypto Economy carries a further detail not repeated in the other two summaries: a separate on-path attack exposed passwords for a subset of customers. The outlet does not specify in the supplied material how many customers were affected or whether the exposed passwords differed from the password hashes covered by the broader disclosure. Cointelegraph, by contrast, concentrates on the discrepancy between Chainalysis’s initial statement and its later acknowledgment that hashes and live tokens were exposed.
The sequence of reporting is significant because Chainalysis’s first public description limited the incident to non-sensitive data, while the subsequent disclosure identified material that could affect how affected accounts and sessions are evaluated. The November 4 security update cited by Crypto.news serves as the point of the revised disclosure. The summaries do not quantify the number of affected users, the number of exposed tokens or the extent of financial activity associated with them.
The broader market was broadly lower as the security news was reported. Total crypto market capitalization stood at $2.62 trillion, 
Bitcoin was down 4.70% over 24 hours, and the Fear & Greed index registered 28, placing sentiment in Fear. No specific coin connected to the incident was identified. The immediate focus remains the exposure of hashes and tokens, the isolation of affected products and the restoration of the investigation and screening services taken offline.
Chainalysis expands breach disclosure to hashes and live tok — questions & answers
What data did Chainalysis confirm was exposed?
Chainalysis confirmed exposure of names, usernames, password hashes and live tokens. This broadened its initial statement that only non-sensitive customer data had been accessed.
Which Chainalysis products were taken offline?
Crypto Economy reports that KYT tools, address-screening tools and additional products were taken offline. Crypto.news more broadly refers to affected investigation and transaction-monitoring services.
What did Chainalysis initially say had been accessed?
Cointelegraph reports that Chainalysis initially described the access as limited to non-sensitive customer data before later disclosing hashes and live tokens.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from Crypto Economy, Cointelegraph, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.