Allium detected unauthorized access to some of its systems on October 25, then revoked all of its customers’ API keys and required a new password at first login. The company, which indexes more than 150 blockchains and lists Visa, Coinbase, Stripe, Standard Chartered, the Monetary Authority of Singapore and the Boston Consulting Group among its announced clients, has not specified which data was accessed or how many people were affected. Its explorer and API returned on October 28, but several major services remained offline, including the Allium assistant, the MCP server and file imports, while the recovery of missing data on BigQuery was still underway. Allium is investigating with an independent cybersecurity firm and has promised to summarize the findings without setting a date. The incident follows reported breaches at Amplitude, Bithumb and Daishin Securities, highlighting cryptocurrency companies’ exposure to intrusions involving third-party providers.
Source: Read the original article
