Chainalysis to restore KYT services after adding trusted IP allowlist
Chainalysis says it will bring its KYT and address‑screening products back online after customers supply trusted IP addresses for an allowlist. The firm disclosed that a multi‑front cyberattack employing AI agents and a man‑in‑the‑middle on‑path technique stole names, usernames, password hashes and live tokens for all of its users. It has taken its login portal, Reactor, Data Solutions, KYT interface and API offline, locked impacted accounts and urged customers to reset passwords.
Key facts
- Customers include the FBI, ICE, US Air Force, Microsoft, Coinbase and Barclays.
- Attackers used AI tools to harvest names, email addresses, user IDs and role labels.
- The on‑path component exposed a subset of passwords, which has now been fixed.
- Chainalysis found no evidence that investigative graph data or attribution repositories were accessed.
- Chainalysis removed access to Reactor and Data Solutions during its investigation.
Summarised with AI from 3 sourcesRead our AI policy
Why it matters
The breach compromises credentials of government agencies and major firms, raising risk of broader cyber‑espionage.
What changed
First published from The Hacker News, BleepingComputer and Ars Technica