Chainstack Confirms Breach of Production Systems and Password Hashes
Chainstack, a blockchain infrastructure provider, confirmed that an external attacker accessed production systems and a customer database holding names, email addresses, and password hashes. The company assesses the incident as part of a large-scale, AI-powered attack campaign that came to light the previous week. Chainstack customers should reset passwords and enable two-factor authentication.
What happened
Chainstack, a blockchain infrastructure provider, confirmed that an external attacker gained unauthorized access to production systems and a customer database containing names, email addresses, and password hashes. The company itself assesses the incident as part of a large-scale, AI-powered attack campaign.
Why it matters
Customer data, including password hashes, was exposed. Companies using Chainstack to run blockchain operations may have credentials at risk, and passwords reused elsewhere could open access to internal systems.
What to do
If your company uses Chainstack, reset passwords on affected accounts, enable two-factor authentication, and review account activity for suspicious access.
For the technical team
- Affected
- Sistemas de produção e banco de dados de clientes da Chainstack · Chainstack production systems and customer database (names, email addresses, and password hashes).
- Exploitation
- Breach confirmed by Chainstack itself in a Tuesday disclosure. No CVE or PoC involved per the sources. The Hacker News reports the intrusion is assessed as part of a large-scale, AI-powered campaign that came to light the previous week.
- Fix
- Not applicable: confirmed intrusion; sources cite no software fix.
- Vector
- Not detailed in sources: Chainstack says only that an external attacker gained unauthorized access to part of its infrastructure, including production systems.
- More details
- Disclosure was made by Chainstack on a Tuesday. The link to the AI-powered attack campaign is the company's assessment, echoed by The Hacker News.
Timeline
Chainstack says the intrusion reached production systems, exposing customer data and password hashes, and links it to an AI-powered attack campaign.
Incident opened.
Sources 2 sources
- @TheHackersNews @TheHackersNews
- Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes The Hacker News
