Chainstack contains security breach after customer data exposure
Blockchain infrastructure provider Chainstack says an October security breach exposed customer names, email addresses and password hashes after an attacker moved from a development environment into parts of production. The company says the incident is now contained, customer-facing services remained operational, and it is asking users to rotate node credentials and change passwords.
Highlights
- Chainstack detected and contained an intrusion from Oct. 26 to Oct. 31, after an attacker exploited a Grafana instance with default administrator credentials.
- Attackers used the ARTEX AI agent framework to obtain machine credentials, accessed the production environment and database network, but did not modify customer nodes, the console, or the API.
- Chainstack is treating node credentials as exposed, urging customers to rotate credentials and passwords, and warns of increased cyberattacks on digital asset infrastructure by AI-powered tools.
Breach timeline and access path
As reported by The Block, citing Chainstack in a post, the attacker first gained access to a development environment on Oct. 26 and reached parts of the production environment on Oct. 29. The company says it detected the intrusion and cut off the access paths on Oct. 31, then finalized its investigation on Nov. 2.Chainstack says the breach began through an internet-exposed Grafana instance in a development cluster that had been deployed for testing with default administrator credentials and without an added layer of protection. The attacker then obtained machine credentials that allowed access to the production environment and the database network, with the company saying the ARTEX AI agent framework was used in the attack.
Customer response and sector implications
Following the incident, Chainstack says it is treating node credentials as exposed and notifying customers to rotate them and change their passwords. The company adds that customer nodes, the console and the API were not modified, and that self-service rotation for node credentials is available in the console without downtime.Chainstack is also warning customers to watch for phishing attempts, saying it will never ask for passwords, tokens or keys. The breach adds to a broader rise in cyberattacks affecting digital asset and infrastructure companies as AI tools become more capable.
We have previously noted that cybersecurity startup funding jumped in Q3 as larger late-stage rounds lifted totals despite fewer deals.
Latest Company News News
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
