The Allium security breach disrupted the blockchain data provider’s services and prompted it to revoke API keys after unauthorized access to some of its systems. Allium detected the incident on October 25, 2026, and confirmed it publicly on October 28.

Key Takeaways

  • Allium’s core application, Explorer and Explorer APIs are back online, but some features remain unavailable.
  • The company has engaged an independent cybersecurity firm and plans to share findings after the investigation.

Allium security breach and response

In Allium’s security update, CEO and co-founder Ethan Chan said the company restricted access, secured its systems and notified affected customers directly. The company has not identified those customers or said whether sensitive information was stolen.

Allium began revoking existing API keys and instructed customers to generate replacements and set new passwords. It also encouraged them to enable multifactor authentication. Revoking credentials as a precaution does not establish that attackers obtained or misused every customer’s keys.

Service and data recovery

Allium’s Explorer became unavailable on October 25, and its application was shut down as a precaution on October 26. Core Explorer functionality and associated APIs were restored on October 28.

Customer dataset uploads and access to previously uploaded information remained disabled, leaving queries that relied on those tables unavailable. Allium Assistant and its Model Context Protocol service were also offline during the October 28 recovery update. The company did not provide a definitive restoration timetable.

Data distribution to customers using Snowflake, Databricks and Google BigQuery had resumed by October 28. Allium was still checking completeness and filling gaps in records from the disruption, including for Ethereum, Bitcoin, Solana and Base.

What remains unknown

Allium provides blockchain data infrastructure to businesses including Visa, Stripe and Coinbase. Its disclosure does not establish that those companies’ own systems were accessed or that customer funds were compromised.

The company has not established how the attackers gained access. It has engaged an independent cybersecurity firm to investigate and review its security controls.

Next milestone

Allium plans to publish a summary of the investigation’s findings and the measures taken in response.

Read More News

More FinanceVelix news

Disclaimer

This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.