Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
Summary: Chainstack disclosed that an external attacker entered through a third-party component, reached a development environment on October 26, 2026, escalated into parts of its production environment, and was detected and cut off on October 31, 2026. The attacker accessed a database of customer account information including organization names, account holder names, member email addresses and password hashes, and had access to systems holding node credentials that Chainstack is treating as exposed.
Why it matters: Node credentials and password hashes sat in systems the attacker could reach, and Chainstack has no evidence they were read but is still asking every customer to rotate node credentials and regenerate platform API keys - the assessment ties the intrusion to an AI-powered campaign that also hit WorkOS, Chainalysis and DIVD.
Read the original at The Hacker News ↗
- Topics
- Data Breaches
- Mentions
- CVE-2026-102489CVE-2026-102490
- Related
- ⚡ Weekly Recap: Net Scaler and Forti Mail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests Cyber Risks ·CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability Known Exploited Vulnerabilities · Oct 02, 2026CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Oct 02, 2026