Chainalysis says hackers stole credentials and tokens for all of its customers
摘要
区块链分析公司Chainalysis表示，黑客在其网络安全遭入侵后获取了全部用户的敏感个人信息，包括姓名、用户名、密码哈希和有效令牌。该公司称事件发生在10月，外部攻击者利用AI代理辅助的攻击技术未经授权访问了其系统和内部工具。公司邮件称部分“非敏感客户数据”被访问，包括用户ID、全名、邮箱和组织角色标签，但未解释为何将其视为非敏感。Chainalysis及
Blockchain analysis firm Chainalysis said that hackers have obtained sensitive personal information—including names, usernames, password hashes, and live tokens—for all of its users following a breach of its network security.
The accomplishment could be a major coup for the attackers. Both Chainalysis and public sources have revealed a long list of high-profile customers, including government agencies such as the FBI, US Immigration and Customs Enforcement agency, and the US Air Force, as well as private companies such as Microsoft, Coinbase, and Barclays. It's unclear if the data theft exposed customers to additional threats.
We regret to inform you...
Last Friday, Chainalysis said it had been the target of a cybersecurity incident in October that was similar to the hacks of other platforms during the same month. The external actor used AI agent-assisted offensive techniques to gain unauthorized access to Chainalysis systems and internal tools. An email the company sent to affected customers said some “non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed.” It's not clear why the company considered such information "non-sensitive."
转载信息
评论 (0)
暂无评论，来留下第一条评论吧