Allium Discloses Security Breach, Revokes API Keys

Allium, a blockchain data provider, said it detected unauthorized access to some of its systems on Oct. 25. Its core services are back online, but customers face API-key replacements and restrictions on uploaded data.

“We have notified affected customers directly,” CEO and co-founder Ethan Chan wrote in the Oct. 28 disclosure. The company did not name those customers, specify which systems were accessed, or say whether customer or end-user data was exposed.

Allium provides tools to query blockchain activity, real-time data APIs and data feeds into customers’ cloud warehouses. It lists Visa and Coinbase as users of its data. Visa’s public onchain analytics dashboard identifies itself as powered by Allium; neither company is named as affected in the security disclosure.

Recovery Requires New Credentials

In an Oct. 28 status update, Allium said existing API keys were being revoked as a security precaution. Customers should generate replacements in the app unless their Allium contact is supplying a new key. Users are also being asked to set a new password, and the company recommends enabling multifactor authentication.

Uploading new data and accessing previously uploaded data are temporarily disabled, so queries using uploaded tables will not run. Allium Assistant and Allium MCP also remain unavailable, according to the company’s status page.

Restored delivery does not yet mean all data gaps have been filled. In a datashare update at 3:47 p.m. ET on Oct. 28, Allium said delivery was operating normally across Snowflake, Databricks and BigQuery. But it was still filling gaps from the affected window for some chains on Snowflake and Databricks, and for all chains on BigQuery. Work on Hyperliquid remained in progress.

Allium said it had engaged an independent cybersecurity firm to support its response and investigation and was strengthening authentication and monitoring. It plans to share a summary of its findings and response measures after the investigation.