Allium Security Incident Causes Partial Service Disruption

Allium has experienced a security breach as a blockchain data provider, including partnerships with Visa, Stripe, and Coinbase. While core services have been restored, some functionalities remain suspended. On the 25th, Allium confirmed unauthorized access and immediately restricted access and implemented system protection measures. CEO Ethan Chan stated that they are directly notifying and assisting affected customers. An external cybersecurity firm has been appointed to determine the cause of the incident and the extent of the damage, with plans to strengthen authentication and monitoring systems. The incident has temporarily halted the blockchain data query service, Explorer, and its application. Although the Allium app, Explorer, and Explorer API have resumed operations, the AI-based data analysis service, Allium Assistant, and MCP functionality have not yet been restored. As a security precaution, existing API keys have been revoked, and customers are required to obtain new API keys and reset passwords while enabling multi-factor authentication (MFA). Data supply has also been disrupted, and while Allium has resumed data transmission through Snowflake, Databricks, and Google BigQuery, they are currently working on recovering data gaps that occurred during the service interruption. The types and scale of the information leaked in this incident have not yet been disclosed.