New YorkChainalysis says live tokens for all its users were exposed.
Its more than 1,500 customers include law enforcement, regulators and national security agencies.
Names, usernames and password hashes were exposed too, and active tokens may open accounts without passwords.
Chainalysis says it has no evidence investigations data was accessed or attribution data manipulated.
Chainalysis took its login page offline, so customers cannot yet reset their passwords.
How each outlet framed it
- The Record leans critical
- stresses that the "all users" exposure now includes live session tokens and password hashes, and that the "agentic" attacker wording was never explained
Sources: The Record