Chainstack discloses breach affecting customer data and password hashes

Blockchain infrastructure provider Chainstack disclosed Tuesday that an attacker accessed a database containing customer account information and password hashes. The company said the intruder entered a development environment through a third-party component on October 26, then reached parts of production. It detected the intrusion and cut access on October 31. The database held organization names, account holder names and members' email addresses. Chainstack is asking customers to rotate node credentials, regenerate platform API keys and change passwords. It found no evidence that node credentials were read, but is treating them as exposed.