Chainalysis Says Hackers Took Credentials and Tokens for All Customers

Chainalysis, the blockchain analytics firm that counts governments, exchanges and investigators among its clients, says attackers stole login credentials and access tokens tied to all of its customers. The company describes the intrusion as a "multifront cyberattack." According to its statement, the campaign involved AI agents and an on-path attack, a technique in which an intruder sits between two systems and intercepts the data moving between them.

The scope is what makes this disclosure stand out. Credentials and tokens act as keys: whoever holds them can act as a legitimate user or integration without ever cracking a password or breaking the platform's defenses. That means a theft like this can expose customer accounts and the data behind them even if the core systems were never directly compromised. The usual first response is to rotate or revoke the affected credentials and treat any session or integration linked to them as potentially compromised.

The initial account leaves important questions open. It does not say how many intruders were involved, how long they had access, or whether anything beyond credentials and tokens was viewed or taken. Those answers will shape how much risk customers face and how the company's security posture is judged once a fuller account is available.