Overview
- Allium detected unauthorized access on Oct. 25, which took its Explorer offline and led the company to take its main application down the following day as a precaution.
- By Oct. 28 Allium restored its primary application and Explorer APIs but revoked existing API keys and instructed customers to issue new credentials and enable multifactor authentication.
- Data feeds to Snowflake, Databricks and Google BigQuery were paused during the incident and have been restarted, yet Allium is still checking for missing records and backfilling affected periods.
- The company hired an independent cybersecurity firm, notified affected customers directly without naming them, and has not identified the attacker or said whether any customer information was exfiltrated.
- Allium, a 2021-founded provider that supports datasets across 150+ blockchains and counts firms such as Visa and Coinbase among users, said it will publish findings after the investigation while customers manage credential rotation and potential stale data in their workflows.