Chainalysis: Breach leaked password hashes and active token data

Blockchain analytics firm Chainalysis says the fallout from a cybersecurity incident it disclosed last week is broader than first reported. In an updated notice published on Wednesday, the company stated that a malicious actor exposed customer information for all Chainalysis users, including names, usernames, password hashes, and live tokens. Chainalysis previously said the intrusion involved only non-sensitive customer data and that it had found no evidence attackers accessed authentication credentials or session tokens. The newer account changes the risk picture for users and underscores how incident assessments can evolve as forensic work progresses.