Blockchain Data Firm Allium Says Every Chain Passed Checks After Security Incident

Blockchain data provider Allium said on Friday that its datashares on Snowflake, BigQuery and Databricks “have passed historical verification checks for all chains across all regions,” the latest step in a data repair, though the datashare incident remains open on its status page.

Allium detected a security incident on Oct. 25 and disclosed it on Oct. 28, when CEO and co-founder Ethan Chan published a statement saying the company had found “unauthorized access to certain Allium systems.” Allium’s website lists Visa, KPMG and Coinbase among the firms that use its onchain data.

By Unchained’s count from status-page timestamps, Allium’s status posts showed datashare tables in every region without new data for just under 24 hours, from a notice at 6:09 p.m. EDT on Oct. 26 to a post at 6 p.m. EDT on Oct. 27 saying delivery had resumed. The Allium App was unavailable for about 61 hours: the status page first reported the Explorer down at 7:31 p.m. EDT on Oct. 25, said the next morning that the app had been taken offline as a precaution, and said the Explorer was back online at 9 a.m. EDT on Oct. 28.

Get Unchained’s crypto news in your inbox with the free Unchained Daily newsletter.

Chan’s statement did not say how the access happened, who was behind it, what data was reached, or whether customer data or API keys were taken. Allium also has not said how many customers were affected, or whether the datashare outage was connected to the security incident.

Chan said Allium moved to restrict access, notified affected customers directly and brought in an independent cybersecurity firm. Once that investigation ends, he wrote, Allium plans to “share a summary of our findings and the measures taken in response.” No such summary had been posted as of Friday afternoon.

When Allium brought its Explorer and Explorer API back online on Oct. 28, it revoked existing API keys as a precaution. Customers were told to generate a new key in the app or wait for one from their Allium contact, to set a new password at sign-in, and to consider turning on multi-factor authentication.

The same update said uploading new data and opening previously uploaded data were “temporarily disabled,” so queries touching those tables would not run. Allium also said its Allium Assistant and Allium MCP were not yet available. As of Friday afternoon, the status page had not announced the return of any of those features, and it still listed the Allium App, Explorer UI and Explorer Queries as in partial outage.

Chan wrote that the company is “focused on strengthening our security controls, including authentication and monitoring.”

Related Listen: Ransomware Now Runs Without Humans. Is It Time to Hack Back?

{"@context":"http:\/\/schema.org\/","@id":"https:\/\/unchainedcrypto.com\/blockchain-data-firm-allium-says-every-chain-passed-checks-after-security-incident\/#arve-youtube-pl8d1xlpucs","@type":"VideoObject","embedURL":"https:\/\/www.youtube-nocookie.com\/embed\/Pl8D1xLPUCs?feature=oembed&iv_load_policy=3&modestbranding=1&rel=0&autohide=1&playsinline=1&autoplay=0"}

The post Blockchain Data Firm Allium Says Every Chain Passed Checks After Security Incident appeared first on Unchained.