INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Chainstack's AI-powered infrastructure targeted by unauthorized cyber attack

| 2026-11-03 18:16 CRITICAL LOW AI-ENABLED ATTACK · AUTONOMOUS DATA BREACH
JSON
Executive Summary
AI-generated
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is assessed to be part of a large-scale, artificial intelligence (AI)-powered attack campaign that came to light last week. "An external attacker gained unauthorized access to part of Chainstack's infrastructure through a third-party component," the company said .
Technical Mitigations AI-generated
• Apply the vendor fix for CVE-2026-102489, CVE-2026-102490 and treat internet-facing systems that were not patched in time as potentially compromised until verified. • Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2026-102489CVE-2026-102489 CVE-2026-102490CVE-2026-102490
Target & Sectors
US
Incident Timeline
‎October 26, 2026
Threat actors gained access to a development environment on October 26, 2026, and subsequently escalated their access to breach parts of Chainstack's production environment.
target_region United States
General Document Context
‎2026/10/27
Threat actors used AI-powered techniques to breach Chainstack's production systems, exposing customer data and password hashes.
‎October 31, 2026
Threat actors, believed to be linked to a China-linked cluster using ARTEX, breached Chainstack's production systems exposing customer data and password hashes.
target_region United States
General Document Context
‎November 02, 2026
Chainalysis suffered a cyberattack on November 2, 2026, exposing customer names, emails, and user IDs.
target_region United States
General Document Context
‎Nov 03, 2026
An external attacker gained unauthorized access to part of Chainstack's infrastructure through a third-party component.
target_region United States
General Document Context
tactic Data Breach
 Ravie Lakshmanan  Nov 03, 2026 Data Breach / Cyber Attack Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure.
organisation Chainstack
"An external attacker gained unauthorized access to part of Chainstack's infrastructure through a third-party component," the company said .
‎2026/11/03
Threat actors gained unauthorized access to Chainstack Reports Production Systems, exposing customer data and password hashes.
organisation Chainstack Reports Production Systems
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes.
organisation IT Information Security
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, Chainalysis) facebook linkedin twitter AI Chainalysis Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs Security News
Intelligence Sources
Security Affairs 2026-11-02
The Hacker News 2026-11-03