Allium security breach disrupts services used by Visa, Stripe, Coinbase

cryptonews12:34

Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2679442809?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-10-29 12:34","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2679442809","market":"sg","top_or_hot":-1,"title":"Allium security breach disrupts services used by Visa, Stripe, Coinbase","media":"cryptonews","content":"<div>\n<p>Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations ...</p>\n\n<a href=\"https://crypto.news/allium-security-breach-api-keys-platform-recovery/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Allium security breach disrupts services used by Visa, Stripe, Coinbase</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nAllium security breach disrupts services used by Visa, Stripe, Coinbase\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-10-29 12:34 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/allium-security-breach-api-keys-platform-recovery/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations ...</p>\n\n<a href=\"https://crypto.news/allium-security-breach-api-keys-platform-recovery/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"https://crypto.news/allium-security-breach-api-keys-platform-recovery/","article_id":"2679442809","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/allium-security-breach-api-keys-platform-recovery/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2679442809","pubTimestamp":1793248491,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations and service interruptions following an October 25 security incident.Allium identified unauthorized access to certain systems on October 25 and hired an independent cybersecurity investigator.Allium revoked existing API keys and recommended password changes and multifactor authentication for customers.Some datasets required backfilling, while Allium Assistant and its MCP service remained unavailable during recovery.Allium, whose customers include major financial institutions, raised $40 million in Series B funding in June.According to an official security update, CEO and co-founder Ethan Chan said the company restricted access after detecting the intrusion, notified affected customers and hired an independent cybersecurity firm to investigate. Allium has restored its main application and Exp","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"Allium 安全漏洞扰乱了 Visa、Stripe、Coinbase 使用的服务","themeId":null,"isJumpTheme":false,"ttsUrl":"https://static.tigerbbs.com/172386795ff7974792b167df08d41b4f","symbols_score_info":{"09311":0.6,"LATR":0.6,"IPAY":0.6,"COYY":0.6,"CIR":0.6,"CONL":0.6,"UYG":0.6,"FINX":0.6,"FIAT":0.6,"COIA":0.6,"BLCK":0.6,"COIX":0.6,"FDIG":0.6,"ICOI":0.6,"TFNS":0.6,"FNCL":0.6,"IBLC":0.6,"CRCO":0.6,"CONX":0.6,"CRCG":0.6,"BITQ":0.6,"07711":0.6,"COIG":0.6,"IYG":0.6,"09711":0.6,"CRCA":0.6,"TRUF":0.6,"CRCD":0.6,"V":1.82,"07311":0.6,"CCUP":0.6,"COII":0.6,"CRCL":1.74,"COIN":1.82,"CONY":0.6,"IXG":0.6,"COIO":0.6,"XLF":0.6,"ICRC":0.6,"COIW":0.6,"VFH":0.6,"CRPT":0.6,"CONI":0.6,"BKCH":0.6,"FDFF":0.6},"content_text":"Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations and service interruptions following an October 25 security incident.\n\n\nSummary\n\n\n\nAllium identified unauthorized access to certain systems on October 25 and hired an independent cybersecurity investigator.\nThe company restored its primary application and Explorer APIs after several days of service interruptions.\nAllium revoked existing API keys and recommended password changes and multifactor authentication for customers.\nSome datasets required backfilling, while Allium Assistant and its MCP service remained unavailable during recovery.\nAllium, whose customers include major financial institutions, raised $40 million in Series B funding in June.\n\n\n\nAccording to an official security update, CEO and co-founder Ethan Chan said the company restricted access after detecting the intrusion, notified affected customers and hired an independent cybersecurity firm to investigate. Allium has restored its main application and Explorer APIs, although several features remain unavailable.\nAt the same time, the company has not identified the attacker, explained how the unauthorized access occurred or disclosed whether customer information was stolen.\nAllium security breach forces API key resets\nThe company’s public incident history shows that its Explorer became unavailable on October 25, with recovery efforts continuing through October 28. Allium temporarily took its application offline on October 26 as a precaution while staff worked to restore access.\nBy October 28, the Explorer and associated APIs were operational again, but customers faced additional security requirements before resuming normal use. Existing API keys were being revoked, and customers were instructed to generate replacements through the application or obtain new credentials from their Allium contacts.\n\nOn October 25, we identified a security incident involving unauthorized access to certain Allium systems. We took immediate steps to restrict access and secure our systems. We have notified affected customers directly and are continuing to provide updates and support.We engaged…— ethn (@ethanyish) October 28, 2026\n\nThe company recommended resetting passwords and enabling multifactor authentication. Access to previously uploaded datasets and the ability to upload new data remained temporarily disabled, meaning queries relying on those tables could not run.\nAllium Assistant and the company’s Model Context Protocol service were still unavailable in its October 28 recovery notice. \nBlockchain data feeds recover after service disruptions\nThe incident coincided with interruptions to Allium’s data delivery services, which supply blockchain information to enterprise customers using platforms such as Snowflake, Databricks and Google BigQuery.\nAn October 26 status update warned that datashare tables across regions were no longer receiving fresh data. Customers querying those tables could encounter stale results or errors until delivery resumed.\nAllium subsequently reported that data distribution had restarted across the three warehouse platforms. However, it continued checking for missing records and backfilling information from the affected period.\nBy October 28, the company said Ethereum, Bitcoin, Solana and Base datasets on Snowflake and Databricks were among those undergoing freshness and completeness verification. Backfilling continued for other chains and affected BigQuery records.\nThe distinction between restoring an API and completing historical data repairs is important for customers using blockchain datasets in research, accounting or monitoring applications. An operational endpoint does not necessarily mean every table contains a complete record of transactions during an outage.\nVisa and Stripe data provider investigates unauthorized access\nFounded in 2021, Allium specializes in collecting, organizing and analyzing blockchain transactions for institutional customers. Its services turn raw onchain activity into structured datasets used for financial research, payments analysis and business applications.\nVisa works with Allium on its Onchain Analytics Dashboard, which classifies stablecoin transactions and distinguishes payment activity from trading, transfers and other blockchain operations.\nIn an October examination of stablecoin payment activity, crypto.news cited Allium research estimating between $401 billion and $527 billion in payments through August 2026, depending on the classification method.\nThe company’s datasets have featured in research beyond payments. An October analysis of Solana validator distribution used Allium alongside other sources to examine how staked SOL was distributed geographically.\nThe disclosure does not establish that Visa, Stripe or Coinbase suffered unauthorized access to their own systems. Allium confirmed that it notified affected customers directly but did not identify those recipients.\nAllium breach follows $40 million funding round\nThe security incident follows Allium’s $40 million Series B fundraising announcement in June, led by Amplify Partners with participation from Kleiner Perkins and Theory Ventures.\nAt the time, the company said its technology supported data operations across more than 150 blockchains. Its previous Series A fundraising round brought in $16.5 million in 2024 to develop enterprise blockchain infrastructure.\nChan said the company was strengthening its authentication and monitoring controls as its investigation continued.\n“We’re sorry for the disruption this has caused our customers,” he wrote, adding that Allium intended to publish its findings and corrective measures after the investigation.\nThe company has not announced when that report will be released. Its latest status notices continue to track outstanding feature restoration, data verification and repairs to affected records.\n\n\n\n\n\n                Read more:\n            \n\n                XRP Ledger adds Flare to validator list as Anodos steps down","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.52.0","shortVersion":"4.52.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2679442809","isCrawlerRequest":true}