Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services Ravie LakshmananNov 06, 2026Data Breach / Cyber Attack Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data Solutions," the company said. "At this time we continue to have no evidence that any investigations data has been accessed or Chainalysis attribution data has been manipulated." Chainalysis said it has implemented additional proactive monitoring systems to detect unusual activity, adding it took the Know Your Transaction (KYT) user interface and API offline, alongside other address screening products and the login page. Previously, Chainalysis said it was probing what it described as an "ongoing multi-front cyber attack," leading to the discovery of an "on-path attack" that exposed a subset of customer passwords. The company said the attack vector has since been addressed. Out of an abundance of caution, Chainalysis has also taken the step of locking the impacted accounts. "For customers who just received an email from us instructing you to reset your Chainalysis password, resetting this password won't be possible right now," it noted. "We still encourage you, where necessary, to reset your password on other systems where you may be reusing credentials." The development comes less than a week after Chainalysis said it was the target of a cybersecurity incident in which an external actor leveraged offensive agentic techniques to obtain unauthorized access to its systems and internal tools. The company said it intends to begin restoring access to KYT and Address Screening, urging customers to contact its support email ([email protected]) or their Chainalysis account team with trusted IP addresses, which will be added to an allowlist. From there, users can reset their passwords and rotate API keys to register transactions. "We are working around the clock to harden our systems and bring Reactor and Data Solutions back online," Chainalysis said. "We will require additional protections to access accounts, including that every user will have to reset passwords and rotate API keys as appropriate. We will communicate these changes as necessary." It's unclear who is behind the attack, but Chainalysis notes it was similar to "many other tech platforms in recent weeks." Indeed, a number of companies, including Chainstack, OpenCode, Warp, and WorkOS, have disclosed that they have been targeted by artificial intelligence (AI)-driven attacks, some of which involve an autonomous penetration testing tool called ARTEX. According to Microsoft, threat actors are using an agentic AI offensive framework to search public GitHub repositories for exposed secrets, such as credentials, application credentials, and AI inference-related API keys across multiple applications and cloud services, to conduct follow-on attacks. "Agentic tooling like ARTEX allows threat actors to not only scan for secrets across multiple repositories at a quicker pace but also use the agents to analyze the output and conduct follow-on attacks, cutting down on the need for the threat actor to have hands-on-keyboard interactions throughout the attack chain," the tech giant said. In at least one case, an AI agent is said to have progressed from scanning GitHub for secrets to exfiltrating data from Azure Key Vault in just five minutes. The activity is assessed to be ongoing from August 2026. Some aspects of the campaign correspond to post-exploitation activity involving the misuse of valid application credentials to access Microsoft Entra ID tenants of certain organizations and connected Azure and Microsoft 365 resources. The sign-in events originated from two IP addresses, 199.19.77[.]84 and 199.19.77[.]18. "The agent successfully conducted service principal sign-ins on dozens of associated applications across multiple tenants," Microsoft said. "The threat actor targeted operations that return credentials, including storage account keys, App Service settings, connection strings and publishing credentials, AI and machine learning (ML) connections and datastores, and Azure Kubernetes Service (AKS) user credentials. The compromised applications subsequently accessed SharePoint and OneDrive in the targeted organization tenants, including file downloads and mailbox-item access." In addition, the threat actor has been observed attempting to steal Azure resources, including compromised Azure AI services, likely as part of efforts to facilitate broader attack activity. Another notable aspect of the campaign is that the agentic AI tools have been found obtaining a token for a single-tenant OAuth application in the same target organization, then use the compromised OAuth application to enumerate other cloud resources within the organization. In a handful of cases, Microsoft said it observed the agents exfiltrating secrets from the organization's Azure Key Vault. "During this activity, the AI agents repeatedly demonstrated a focus on credentials that provide access to AI services, such as API keys for major AI service providers and OAuth applications with access to Foundry Tools (previously known as Azure Cognitive Services)," Microsoft said. The development also coincides with a surge in attacks targeting AI developer platforms over the past month, allowing threat actors to resell access, abuse them as free compute (i.e., LLMjacking), and use them as attribution cover for further attacks. In a report published this week, Google disclosed that cybercriminals have established a business model out of stealing cloud access to commercial large language models (LLMs) and reselling it to paying customers. The monetization infrastructure centers on LLM Mixers, who act as an illicit intermediary to advertise access to compromised enterprise LLM accounts on underground markets without their customers needing to set up their own legitimate API credentials or cloud infrastructure. In other words, LLM mixers turn stolen enterprise model access into a criminal routing gateway for paying subscribers, while the legitimate owner's systems continue to accept requests. These services help proxy requests across stolen accounts, distribute consumption, and obscure the original source of access. The emerging LLMjacking ecosystem "create[s] a market that makes the theft easily monetizable, likely driving more actors to undertake operations to steal credentials," Wiz said. The Google-owned subsidiary also said it identified at least two resale operations leveraging stolen AWS Bedrock keys obtained from two different organizations – llm-routing[.]com (momo) and xingjiabiapi[.]org – both of which offer a wide selection of frontier models for discount prices. That said, there is no evidence that the operators of these websites were responsible for the initial platform compromises. Interestingly, the IP address linked to llm-routing[.]com, 23.106.46[.]239, hosted an Artex landing page in mid-October 2026 and has been flagged by Zeabur as an indicator of compromise. Last month, Zeabur disclosed a security breach in which an unknown threat actor exploited credentials stored in plaintext to compromise its infrastructure, exfiltrating over 3.2 million environment variable records and data associated with 321,810 accounts. The following IP addresses have been used to test stolen keys and are suspected to be linked to LLM token abuse and resale - "Threat actors are not only using AI as a tool to conduct attacks, they are also compromising victim environments solely to abuse their finances for mass Large Language Model (LLM) execution, incurring hundreds of thousands of dollars in AI API charges," Wiz said. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. artificial intelligence, Cloud security, Credential Theft, Cyber Attack, Cybercrime, data breach American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits AI-Generated Fake Login Pages Are Making Account Takeovers Easier China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Secure My Spot Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. ROI Calculator: See the Value of IAM Automation Calculate your savings on audits, app onboarding, and discovery. Try it now. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk Why Root and Jailbreak Detection Alone Cannot Guarantee Mobile App Security