---
title: Chainalysis says Reactor, KYT and Address Screening are back online with enhanced security; customers must reconnect per emailed instructions | ctxsec
url: https://ctxsec.com/items/chainalysis-nov-7-reactor-kyt-address-screening-restored
description: "In a Saturday Nov 7, 1:50 P.M. EST update to its Oct 30 security-incident blog, Chainalysis says Reactor, KYT (UI and API) and Address Screening are restored with enhanced security measures. Customers are being emailed specific reconnect steps. The Nov 4 disclosure still stands: names, usernames, password hashes and live tokens for all users were exposed, and some KYT accounts showed unauthorized access. Chainalysis continues to say it has no evidence investigations data was accessed or attribution data manipulated."
status: "official (Chainalysis incident blog, Nov 7 1:50 PM EST update); reconnect instructions emailed to customers; original agentic intrusion still under investigation"
published: 2026-11-07
---

> In a Saturday Nov 7, 1:50 P.M. EST update to its Oct 30 security-incident blog, Chainalysis says Reactor, KYT (UI and API) and Address Screening are restored with enhanced security measures. Customers are being emailed specific reconnect steps. The Nov 4 disclosure still stands: names, usernames, password hashes and live tokens for all users were exposed, and some KYT accounts showed unauthorized access. Chainalysis continues to say it has no evidence investigations data was accessed or attribution data manipulated.

[← Cybersecurity News](/news) · [markdown](/items/chainalysis-nov-7-reactor-kyt-address-screening-restored.md)

official (Chainalysis incident blog, Nov 7 1:50 PM EST update); reconnect instructions emailed to customers; original agentic intrusion still under investigation

2026-11-07

### Chainalysis says Reactor, KYT and Address Screening are back online with enhanced security; customers must reconnect per emailed instructions

- Follow the Nov 7 reconnect email; if you have not already, submit trusted IPs for the allowlist and reset passwords / rotate API keys before registering transactions.
- Go to the Chainalysis login page directly; ignore reset links in unexpected email while phishing volume is high.
- Reset the same password anywhere it was reused; review your own logs for unexpected KYT API activity since late October.

See our earlier [Nov 4/6 impact item](/items/chainalysis-update-all-users-password-hashes-live-tokens-kyt-offline) and the [Oct 30 disclosure](/items/chainalysis-security-incident-agentic-intrusion-customer-user-data).

Sources: [Chainalysis: Security Incident Information (updated Nov 7, 1:50 PM EST)](https://www.chainalysis.com/blog/security-incident-october-30/)