blockchain infrastructure provider Chainstack says an unauthorized attacker accessed parts of its infrastructure, including production systems, in an incident disclosed Tuesday. The company believes the breach is linked to a broader campaign involving artificial intelligence-powered attacks that emerged last week.
According to Chainstack’s account of the incident, the attacker entered a development environment on October 26, 2026, through a third-party component and later reached parts of the production environment. The company detected the intrusion on October 31 and cut off the attacker’s access that day.
The attacker accessed a database containing customer account information, including organization and account-holder names, member email addresses, and password hashes. Chainstack also said the attacker had access to systems that hold node credentials. The company has no evidence those credentials were read, but is treating them as exposed and asking customers to rotate them.
Chainstack recommends that customers also regenerate platform API keys, change passwords—including any reused on other services—and watch for phishing attempts.
The company did not provide further details about the attack. Its disclosure follows reports of incidents at other organizations associated with the same AI agent framework, ARTEX. Chainalysis said last week that an external actor used offensive agentic techniques to access its systems and internal tools; as of November 2, it had taken its Reactor and Data Solutions products offline as a precaution.
Sources: The Hacker News.