Key Highlights
- Allium, a blockchain data provider serving Visa, Stripe, and Coinbase, confirmed unauthorized access to some of its systems on October 25.
- The company disclosed the incident on October 28, immediately restricting access, notifying affected customers, and engaging an independent cybersecurity firm.
- The company revoked existing API keys as a precaution, requiring customers to generate new ones and recommending password resets and multifactor authentication, while access to uploaded datasets and some features like Allium Assistant and MCP remained disabled during recovery.
Allium, a New York-based blockchain data provider that serves institutional clients including Visa, Stripe, and Coinbase, revealed a security incident that involves unauthorized access to certain systems. The company detected the issue on October 25 and publicly disclosed details on October 28.
CEO and co-founder Ethan Chan stated on X that Allium identified unauthorized access to some of its systems. The firm immediately restricted access, secured its systems, notified affected customers directly, and engaged an independent cybersecurity firm to support the response and investigation. Allium plans to share a summary of findings and remedial measures once the investigation concludes.
“We’re sorry for the disruption this has caused our customers. We know maintaining their trust requires clear communication and follow-through, and we’re committed to both,” Ethan said.
Core platform services, including the Allium App, Explorer, and Explorer APIs, have been restored and are back online. Some features remain temporarily unavailable as recovery continues. Current status updates are available on the company’s status page.
API Key Revocation and Customer Requirements
As a precaution, Allium is revoking existing API keys. Customers must generate new keys through the application or obtain them from their Allium contacts. The company also recommended password resets and enabling multifactor authentication.
Access to previously uploaded datasets and the ability to upload new data remain disabled. Queries that rely on uploaded tables will not run. Allium Assistant and the company’s Model Context Protocol service were also unavailable during the recovery period as of the latest updates.
Service Disruptions and Data Recovery
The incident caused interruptions to data delivery services that supply blockchain information to enterprise customers via platforms such as Snowflake, Databricks, and Google BigQuery. An early status update noted that datashare tables stopped receiving fresh data in some regions.
Allium later reported that delivery had resumed across the warehouse platforms. However, the company continued verifying data freshness and completeness and backfilling missing records from the affected period. Ethereum, Bitcoin, Solana, and Base datasets were among those undergoing checks. Restoring an API endpoint does not automatically mean every historical record is complete.
Company Background and Client Relationships
Founded in 2021 by Ethan Chan and Cheng Han Lee, Allium specializes in collecting, organizing, and analyzing blockchain transactions across more than 150 chains. It converts raw on-chain activity into structured, queryable datasets used for research, compliance, payments analysis, and operational workflows.
Visa uses Allium data to power its public Onchain Analytics Dashboard, which classifies stablecoin transactions and distinguishes payment activity from trading and other movements. Stripe and Coinbase are also listed among users of Allium’s services. The company’s data has been cited by the Federal Reserve and academic institutions.
The disclosure does not indicate that Visa, Stripe, or Coinbase systems themselves experienced unauthorized access. Allium notified affected customers but did not name them publicly.
In June 2026, Allium raised $40 million in a Series B round led by Amplify Partners, with participation from Kleiner Perkins and Theory Ventures. The company previously raised $16.5 million in a Series A in 2024. At the time of the Series B, Allium reported supporting data operations across more than 150 blockchains and serving institutional customers.
Allium Hires Independent Cybersecurity Firm to Investigate Matter
Allium has not identified the attacker, detailed the method of unauthorized access, or confirmed whether customer or end-user data was exposed. The independent cybersecurity firm continues to assist with the investigation. The company is strengthening authentication and monitoring controls.
Chan apologized for the disruption and emphasized the importance of clear communication and follow-through to maintain customer trust. Updates on feature availability, data verification, and remaining recovery work continue to be posted on the status page.
The incident highlights ongoing security challenges for infrastructure providers that sit between public blockchains and institutional users. The digital asset sector is currently facing a fresh wave of cyberattacks, in which popular platforms like Ledger were compromised. As of the latest reports on October 29, core services are operational, while selective features and full data completeness remain under restoration.
