2026-11-04
Chainstack (Blockchain Node and API Platform) Production Breach: What Developers and dApp Operators Should Do About Account Data and Node Credentials
In a notice dated November 3, 2026, Chainstack says an external attacker reached part of its infrastructure through a third-party component: a development environment on October 26 and part of production on October 29, detected and cut off on October 31, with the investigation closed on November 2. Information that may have been exposed from a customer account database is organization names, account holder names, the email addresses of organization members and password hashes. Systems holding node credentials were also accessed; the company has no evidence they were read but treats them as exposed. It says it does not store payment method details, that nodes, the console and the API were not modified, and that service continued. No customer count is given. This site's conclusion: users should change their password, rotate node credentials and platform API keys, and replace endpoints embedded in apps, CI and front ends.