{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys · updates",
  "home_page_url": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026",
  "feed_url": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026/feed.json",
  "description": "Allium, a blockchain data provider whose query tools, APIs and warehouse data feeds are used by companies including Visa and Coinbase, disclosed on Oct 28 2026 that it detected unauthorized access to some of its systems on Oct 25. The Allium App and Explorer were offline for about two and a half days. When Explorer and its API came back on Oct 28, Allium revoked existing API keys, required new passwords and recommended MFA, disabled uploading and reading previously uploaded data, and kept Allium Assistant and the Allium MCP offline. It says affected customers were notified directly and an independent security firm is investigating, but it has not said which systems were reached or whether customer data was exposed.",
  "language": "en",
  "_pwn": {
    "slug": "allium-blockchain-data-unauthorized-access-oct-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-28-1c5f3c79",
      "url": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-28-1c5f3c79",
      "title": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: Allium Explorer and Explorer API come back online. Existing API keys are revoked, users must set a new password (MFA recommended), uploading and accessing previously uploaded data is disabled, and Allium Assistant and the Allium MCP stay unavailable.",
      "content_text": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: Allium Explorer and Explorer API come back online. Existing API keys are revoked, users must set a new password (MFA recommended), uploading and accessing previously uploaded data is disabled, and Allium Assistant and the Allium MCP stay unavailable.\n\nSource: https://status.allium.so/",
      "date_published": "2026-10-28T00:00:00.000Z",
      "external_url": "https://status.allium.so/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-28-af0636fe",
      "url": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-28-af0636fe",
      "title": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: CEO and co-founder Ethan Chan discloses that Allium detected unauthorized access to some of its systems on Oct 25, says affected customers were notified directly and an independent cybersecurity firm was engaged; the company has not said which systems were accessed or whether customer data was exposed.",
      "content_text": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: CEO and co-founder Ethan Chan discloses that Allium detected unauthorized access to some of its systems on Oct 25, says affected customers were notified directly and an independent cybersecurity firm was engaged; the company has not said which systems were accessed or whether customer data was exposed.\n\nSource: https://cryptonews.net/news/security/33668278/",
      "date_published": "2026-10-28T00:00:00.000Z",
      "external_url": "https://cryptonews.net/news/security/33668278/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-26-e7d033dd",
      "url": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-26-e7d033dd",
      "title": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: Allium takes the whole Allium App offline as a precaution while it works on restoring services.",
      "content_text": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: Allium takes the whole Allium App offline as a precaution while it works on restoring services.\n\nSource: https://status.allium.so/",
      "date_published": "2026-10-26T00:00:00.000Z",
      "external_url": "https://status.allium.so/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-25-d1b48e3c",
      "url": "https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026#2026-10-25-d1b48e3c",
      "title": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: Allium's Explorer goes offline; the status page first describes it as maintenance and an Explorer outage.",
      "content_text": "Blockchain data provider Allium discloses unauthorized access, revokes all API keys: Allium's Explorer goes offline; the status page first describes it as maintenance and an Explorer outage.\n\nSource: https://status.allium.so/",
      "date_published": "2026-10-25T00:00:00.000Z",
      "external_url": "https://status.allium.so/",
      "tags": [
        "medium"
      ]
    }
  ]
}