Allium Confirms Security Breach Affecting Major Financial Clients

Security Breach at Allium

Allium, a blockchain data provider serving high-profile clients such as Visa, Stripe, and Coinbase, has reported a significant security breach involving unauthorized access to some of its systems. This incident, which occurred on October 25, has led to the revocation of API keys and temporary service outages.

Immediate Response

Ethan Chan, the CEO and co-founder of Allium, communicated in a security update that, upon discovering the breach, the company took immediate action to restrict access and notified the customers potentially impacted by the incident. To assist in investigating the breach, Allium has engaged an independent cybersecurity firm, although details regarding the identity of the intruder and the specifics of how the breach happened remain undisclosed. Furthermore, it is unclear if any customer data was compromised.

Service Disruptions

In the wake of the breach, Allium’s Explorer tool was rendered unavailable on October 25, and efforts to restore functionality extended through October 28. As a precaution, the main application was also taken offline temporarily on the 26th. By the 28th, both the Explorer and its APIs were back online, but customers faced additional security protocols before fully resuming their operations. The company instructed users to revoke existing API keys and generate new ones through the application or contact their Allium representatives.

Recommendations and Ongoing Issues

Among the recommendations from Allium were the resetting of passwords and enabling multifactor authentication. Despite the restoration of some services, access to previously uploaded datasets and new data uploads remained temporarily disabled, hampering the operation of queries depending on these tables. Services such as Allium Assistant and the Model Context Protocol were still offline as of the recovery update on October 28.

Data delivery services provided by Allium to customers utilizing platforms like Snowflake, Databricks, and Google BigQuery were also impacted. An update on October 26 indicated that datashare tables had stopped receiving fresh data, resulting in potential stale data for users. Fortunately, by October 28, distribution of data had resumed, yet the company continued verifying and backfilling records from the affected period.

Company Background and Future Actions

Founded in 2021, Allium has positioned itself as a key player in organizing and analyzing blockchain transactions for institutional clients, converting raw on-chain activity into structured datasets. Their collaboration with Visa includes the Onchain Analytics Dashboard, which analyzes stablecoin transactions.

Interestingly, despite the severity of this breach, there is no indication that Visa, Stripe, or Coinbase experienced any unauthorized access to their own systems. Allium reported that it had communicated with affected customers but did not disclose their identities.

This security incident comes shortly after Allium's announcement of a $40 million Series B funding round in June, which was backed by Amplify Partners, Kleiner Perkins, and Theory Ventures. Following an earlier Series A round raising $16.5 million in 2024, the firm had stated its technology underpinned data operations across more than 150 blockchains.

Chan apologized for the disruption experienced by customers, mentioning efforts to enhance their authentication and monitoring measures as the investigation continues. Allium has promised to share the findings and corrective actions post-investigation, although a timeline for the report's release has yet to be established.

Current communications from Allium continue to provide updates on restoring features, verifying data, and correcting records that were affected during this period.