--- title: October crypto-tracker hack: Access cracked, law... description: Chainalysis confirmed attackers who breached its systems in October stole usernames, password hashes, and live authentication tokens. Earlier updates had only... canonical: https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: October crypto-tracker hack: Access cracked, law enforcement tokens packed | daily.dev og:description: Chainalysis confirmed attackers who breached its systems in October stole usernames, password hashes, and live authentication tokens. Earlier updates had only... og:url: https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei og:image: https://api.daily.dev/og/posts/B5yYXB2eI.png og:image:alt: October crypto-tracker hack: Access cracked, law enforcement tokens packed og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # October crypto-tracker hack: Access cracked, law enforcement tokens packed **[The Register](https://daily.dev/sources/theregister)** · 4 min read · 0 upvotes · 0 comments ## Summary Chainalysis confirmed attackers who breached its systems in October stole usernames, password hashes, and live authentication tokens. Earlier updates had only disclosed exposure of user IDs, names, emails, and role labels, so this is a worsening picture. The company detected abnormal activity on its transaction screening products and took down Reactor, Data Solutions, and the KYT login page. It plans to restore KYT and Address Screening on November 5, but every user will have to reset passwords and rotate API keys as appropriate. Chainalysis described the intrusion as an 'on-path' (attacker-in-the-middle) attack and implied the attackers used an AI agent. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What data did attackers steal in the Chainalysis breach that started in October 2026? Attackers obtained usernames, password hashes, and live authentication tokens, in addition to previously disclosed user IDs, full names, email addresses, and organizational role labels. Chainalysis has not confirmed the hashing algorithm used, making it hard to assess how easily the hashes could be cracked offline. The company detected the intrusion on October 30 and called it an 'on-path' (attacker-in-the-middle) attack. _Teams tracking breach disclosures as they evolve can follow updates like this on daily.dev._ ### Which Chainalysis products were taken offline after the October 2026 security incident? Chainalysis took down the Reactor blockchain investigation platform used by law enforcement, the Data Solutions threat intelligence platform, and the KYT (know your transaction) anti-money laundering tool's login and interface, due to abnormal activity detected on its transaction screening products. KYT and the Address Screening tool were planned to come back online on November 5. _Security teams assessing vendor outage impact can track incident timelines like this on daily.dev._ ## Similar posts on daily.dev - [LastPass says hackers stole customer data through a supply chain breach at Klue](https://daily.dev/posts/lastpass-says-hackers-stole-customer-data-through-a-supply-chain-breach-at-klue-cot1tyrco) · The Next Web · 0 upvotes · 0 comments - [Preliminary Report: Oct 21st Security Incident](https://daily.dev/posts/preliminary-report-oct-21st-security-incident-9lrevx8xo) · Railway Blog · 0 upvotes · 0 comments - [Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI Credentials](https://daily.dev/posts/lunar-cyber-launches-token-exposure-monitoring-as-infostealers-target-developer-and-ai-credentials-s8h0eljqc) · Latest Hacking News · 0 upvotes · 0 comments --- Tags: [#blockchain](https://daily.dev/tags/blockchain), [#data-breach](https://daily.dev/tags/data-breach), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"October crypto-tracker hack: Access cracked, law enforcement tokens packed","url":"https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei"},"datePublished":"2026-11-05T18:05:55.827Z","dateModified":"2026-11-06T14:20:33.202Z","description":"Chainalysis confirmed attackers who breached its systems in October stole usernames, password hashes, and live authentication tokens. Earlier updates had only...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ed9a78a1a22fd266b078bc0f8498005d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ed9a78a1a22fd266b078bc0f8498005d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"blockchain,data-breach,ai-security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"October crypto-tracker hack: Access cracked, law enforcement tokens packed"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed-b5yyxb2ei#faq","mainEntity":[{"@type":"Question","name":"What data did attackers steal in the Chainalysis breach that started in October 2026?","acceptedAnswer":{"@type":"Answer","text":"Attackers obtained usernames, password hashes, and live authentication tokens, in addition to previously disclosed user IDs, full names, email addresses, and organizational role labels. Chainalysis has not confirmed the hashing algorithm used, making it hard to assess how easily the hashes could be cracked offline. The company detected the intrusion on October 30 and called it an 'on-path' (attacker-in-the-middle) attack. Teams tracking breach disclosures as they evolve can follow updates like this on daily.dev."}},{"@type":"Question","name":"Which Chainalysis products were taken offline after the October 2026 security incident?","acceptedAnswer":{"@type":"Answer","text":"Chainalysis took down the Reactor blockchain investigation platform used by law enforcement, the Data Solutions threat intelligence platform, and the KYT (know your transaction) anti-money laundering tool's login and interface, due to abnormal activity detected on its transaction screening products. KYT and the Address Screening tool were planned to come back online on November 5. Security teams assessing vendor outage impact can track incident timelines like this on daily.dev."}}]} ```