Chainstack breach: customers told to rotate node credentials

What should Chainstack customers do?

The company's request is short and specific. Rotate the credentials that connect you to your nodes, meaning generate new ones and retire the old ones. Then change your account passwords. Rotating matters because a credential that may have leaked stays useful to an attacker until it is replaced, even after the hole that leaked it has been closed.

What is Chainstack?

Chainstack is a provider of blockchain infrastructure. Developers and companies use it to get access to nodes, the servers that read from and write to a blockchain, without running that hardware themselves. That is why node credentials are sensitive: they are the keys to that access.

The details of what happened are thin so far. The information available does not say how many customers were affected, exactly which data was exposed, or how the attackers used AI. Those are the questions worth watching for in any follow-up from the company.

Until then, the practical advice is the company's own. If you have a Chainstack account, do not wait for confirmation that your data was among what was exposed. Treat the credentials as burned, swap them, and update your passwords.