[chainalysis]

November 7, 2026

• Chainalysis now says names, usernames, password hashes and live tokens for all users were exposed, and has pulled Reactor, Data Solutions, the KYT UI and API, address screening and the login page offline. An on-path attack captured a subset of customer passwords; affected accounts are locked, and restoration requires trusted-IP allowlisting followed by password resets and API key rotation. No evidence investigations data was accessed or attribution data manipulated (The Hacker News) (earlier coverage). · Agentic Tooling in the Wild

in SSHole Exploitation Lands Within Hours of Disclosure

November 6, 2026

• Chainalysis now says some information from every user was exposed. The expanded scope includes names, usernames, password hashes and “live tokens,” although the company has not said every category applied to every user or defined the tokens. Some KYT accounts also appear to have been accessed. There remains no evidence that investigations data was accessed or attribution data altered, and Chainalysis still has not explained “offensive agentic techniques” or established that AI caused the intrusion. Chainalysis and The Record (earlier coverage). · Cloud, Identity & Incident Response

in ARTEX Operator Consoles Expose Near-Autonomous Cybercrime