<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Chainstack breach exposed customer account data and password hashes; rotate node credentials · updates</title>
  <link>https://pwn.watch/i/chainstack-production-systems-breach-nov-2026</link>
  <description>Blockchain RPC provider Chainstack disclosed on Nov 3 2026 that an external attacker reached parts of its infrastructure through a third-party component, in what it links to a broader late-October AI-powered attack campaign. Access began in a development environment on Oct 26, reached some production systems on Oct 29, and was cut on Oct 31 after detection; the investigation closed Nov 2. The attacker accessed a database with organization names, account-holder names, member email addresses and password hashes, and had access to systems holding node credentials. Chainstack says it has no evidence node credentials were read but is treating them as exposed. Customer-facing services kept running; payment card details are not stored. Customers must change passwords, rotate node credentials (self-service in the console), regenerate platform API keys, and watch for phishing.</description>
  <language>en</language>
  <lastBuildDate>Tue, 03 Nov 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/chainstack-production-systems-breach-nov-2026/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>Chainstack breach exposed customer account data and password hashes; rotate node credentials: Chainstack publishes the incident report and asks customers to rotate passwords, node credentials and API keys; The Hacker News covers the breach.</title>
    <link>https://pwn.watch/i/chainstack-production-systems-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/chainstack-production-systems-breach-nov-2026#2026-11-03-8088a0db</guid>
    <pubDate>Tue, 03 Nov 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://chainstack.com/security-incident-nov-2026/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Chainstack breach exposed customer account data and password hashes; rotate node credentials: Chainstack detects the intrusion and cuts the access paths the same day.</title>
    <link>https://pwn.watch/i/chainstack-production-systems-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/chainstack-production-systems-breach-nov-2026#2026-10-31-aa953d99</guid>
    <pubDate>Sat, 31 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://chainstack.com/security-incident-nov-2026/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Chainstack breach exposed customer account data and password hashes; rotate node credentials: Attacker reaches some parts of the production environment.</title>
    <link>https://pwn.watch/i/chainstack-production-systems-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/chainstack-production-systems-breach-nov-2026#2026-10-29-f67c7f6f</guid>
    <pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://chainstack.com/security-incident-nov-2026/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Chainstack breach exposed customer account data and password hashes; rotate node credentials: Attacker gains access to a Chainstack development environment via a third-party component.</title>
    <link>https://pwn.watch/i/chainstack-production-systems-breach-nov-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/chainstack-production-systems-breach-nov-2026#2026-10-26-52735cc8</guid>
    <pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://chainstack.com/security-incident-nov-2026/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
