Chainalysis Restores KYT and Address Verification Services After Data Leak Incident

On November 6, Chainalysis announced the restoration of its Know Your Transaction (KYT) and address verification services as part of a phased process. During a security incident on October 30, user data, including names, usernames, password hashes, and active tokens, was exposed. This necessitated clients to prepare for password resets and API key rotations. Chainalysis also informed clients of the need to provide trusted IP addresses for whitelisting.

In its November 6 update, the company noted that access restoration to KYT and address verification products begins after several days of service restrictions and detailed reports on the cyberattack. Considering that many crypto businesses use verification tools to investigate suspicious transactions or fulfill compliance obligations, the incident tested both information security and the ability of regulated operations to continue their work. Chainalysis initially reported unauthorized interference in its internal systems and tools but added on November 4 that user data was indeed compromised.

Despite the worsening situation, the company found no evidence of access to investigation content or manipulation of attribution data. This information is reassuring, but important questions remain open. It should be noted that password hashes, while not directly ordinary passwords, can cause concern depending on how they are generated and the reliability of the original credentials. Meanwhile, active tokens may also pose a separate risk as they can provide access while remaining valid. Chainalysis confirmed that the expansion of service restoration will continue as enhanced security measures are verified, but full recovery of all affected products was not confirmed at the time of the update.