October crypto-tracker hack: Access cracked, law enforcement tokens packed

Blockchain analysis outfit Chainalysis has confirmed that when attackers broke into its systems in October, they managed to grab usernames, password hashes, and live tokens.

In an update written late Wednesday evening, the company, a leader in blockchain analysis which has some very high-profile global customers and partners, confirmed the impact of the attack for the first time.

In previous updates, which Chainalysis has issued regularly since it detected the intrusion on October 30, it confirmed that user IDs, full names, email addresses, and organizational role labels were exposed. The news of password hashes and live tokens also being accessed reflects a worsening picture for the company.

Chainalysis did not confirm the type of hashing algorithm it used to encrypt users' passwords, which makes it difficult to draw conclusions about the offline crackability of users' hashed credentials.

Some users received emails instructing them to change their passwords, but Chainalysis said in its latest update that the password reset functionality is …