Allium detected unauthorized access to certain systems on October 25 and notified affected customers while bringing in an independent cybersecurity firm to investigate, according to WuBlockchain and CoinBureau.

Allium detected unauthorized access to certain systems on October 25 and notified affected customers while bringing in an independent cybersecurity firm to investigate, according to WuBlockchain and CoinBureau.

The full scope and whether customer data was exposed remain undisclosed. The company, described as a blockchain data provider serving Visa, Stripe and Coinbase, has not published a detailed statement on its X account @AlliumLabs.

Customers must replace credentials. Existing API keys are being revoked and users should create a new key in the app, plus set a new password on sign in with MFA recommended, per Allium Status. Uploading new data and accessing previously uploaded data remain temporarily disabled.

Core services are back online. The Allium App, Explorer and Explorer APIs were restored on Oct 28, while Assistant and MCP were not yet available, per Allium Status. Some datashare tables have passed freshness checks and remaining gaps are still being validated, with DefiantNews noting feeds are still being backfilled.