Chainalysis Restores Screening Tools After Breach
The blockchain analytics firm has started phased restoration of its Know Your Transaction and Address Screening services after a security incident exposed user data.
Updated on Nov. 6, 2026 in Cybersecurity
Live Poll
Do you trust companies that store your personal data to keep it secure?
Chainalysis took its Know Your Transaction (KYT) interface and API, other address-screening products, and its login page offline on Nov. 4 after detecting abnormal activity. The company announced on Nov. 6 that restoration of its services had begun.
Why it matters
KYT monitors cryptocurrency transactions for suspicious activity and is part of customers' compliance operations, so the outage and exposure affected firms relying on these tools. Users must now complete security steps before resuming transaction registration.
Chainalysis reported that data associated with all its users was exposed, including names, usernames, password hashes and live tokens, and that an on-path attack exposed a subset of customer passwords. The company has not said how many customers were affected by the password exposure.
The players
Chainalysis
Chainalysis is a blockchain analytics company whose compliance tools are widely used by cryptocurrency exchanges and financial institutions to monitor transactions.
The details
Chainalysis locked affected accounts and reported no evidence that investigation data had been accessed or that attribution data had been manipulated. The shutdown meant users could not use the login page to reset passwords at that time, and customers must submit trusted IP addresses for an allowlist and reset passwords and rotate API keys before registering transactions.
Timeline
Nov. 4: Chainalysis took screening tools offline after detecting abnormal activity.
Nov. 6, 3:30 a.m. ET (08:30 UTC): Chainalysis announced service restoration had started.
Industry Landscape
The incident involves Chainalysis KYT, a product customers rely on as part of their compliance operations to monitor cryptocurrency transactions. The breach affects the security tooling that financial firms depend on to meet monitoring obligations.
Customers using Chainalysis tools must register trusted IP addresses and reset passwords and rotate API keys before they can resume registering transactions. Users who could not reset passwords during the outage should check their accounts after restoration.
The takeaway
Organizations that depend on third-party compliance tools should confirm their vendors' credential-reset and allowlist requirements and verify their own access after any security-related outage.
Further reading
For more on digital threats and data protection, see our Cybersecurity coverage.
Live Poll
Do you trust companies that store your personal data to keep it secure?
