- The breach enabled unauthorized hackers to gain access to admin rights.
- Approximately 6.8% of Nansen’s user base was affected.
Nansen, a prominent crypto and blockchain analytics company, revealed that it had experienced a security breach originating from one of its third-party vendors. The breach impacted approximately 6.8% of Nansen’s user base.
According to Nansen, the breach enabled unauthorized hackers to gain access to admin rights associated with an account responsible for “provisioning customer access” to the platform.
Nansen did not explicitly name the third-party vendor in question. However, it did describe the vendor as “an established company” widely used by numerous Fortune 500 firms and other industry players for data management purposes.
? Important update from us at Nansen. Please take a moment to read this. pic.twitter.com/syKE0sNnC6
— Nansen ? (@nansen_ai) September 22, 2023
Security breach from unnamed third-party vendor
Users who were affected had their email addresses compromised, along with the exposure of certain password hashes. Additionally, some users saw their blockchain addresses compromised as well.
Nansen promptly identified and notified the affected users, emphasizing the importance of changing their passwords to enhance security. Fortunately, Nansen clarified that the breach had no impact on the wallet funds of its users.
Nansen CEO on crypto’s future
In a recent interview, Nansen’s CEO, Alex Svanevik, expressed his vision for the crypto industry’s future. He believes that a protocol will eventually emerge that strikes a delicate balance between blockchain transparency and user privacy while adhering to regulatory requirements.
This vision highlights the ongoing efforts to address critical issues of transparency and data privacy within the crypto ecosystem.
However, Nansen, like many other companies, has faced its share of challenges. In May, the firm grappled with the adverse effects of the persistent bear market, resulting in a workforce reduction of approximately 30%.
Notably, last week, a phishing attack targeted Fortress Trust’s third-party software provider. This resulted in a loss of $15 million in crypto funds. Trust did not disclose the vendor’s name but identified it as a company utilized by Fortune 500 firms.
Trust asserted that no funds were lost during the incident.
