Allium discloses security breach, revokes API keys after unauthorized system access

Blockchain data provider Allium detected unauthorized access to its systems on October 25, 2026, leading to service interruptions, the revocation of customer API keys, and disabled data uploads. By October 28, 2026, Allium restored its core application and resumed data distribution to Snowflake, Databricks, and BigQuery while backfilling record gaps. CEO Ethan Chan engaged an independent cybersecurity firm to investigate the incident. Allium serves major financial firms, including Visa, Stripe, and Coinbase, though its disclosure indicates no compromise of clients' internal systems.

Incident detection and initial response

• ▪Blockchain data provider Allium detected unauthorized access to certain internal systems
• ▪Allium temporarily took its primary application offline
• ▪Allium disabled access to previously uploaded datasets and paused new data uploads following the October 25, 2026 breach.
• ▪Allium revoked existing customer API keys following the October 25, 2026 security incident.

Customer notification and security recommendations

• ▪Allium instructed affected customers to generate replacement API keys, change their passwords, and enable multi-factor authentication following the breach.
• ▪Allium notified affected customers directly following the October 25, 2026 incident, but did not publicly identify which client accounts were impacted.

System restoration and data recovery

• ▪Allium resumed data distribution to Snowflake, Databricks, and Google BigQuery by October 28, 2026, while continuing to verify and backfill missing records for Bitcoin, Ethereum, Solana, Base, and Hyperliquid.
• ▪Allium restored its core application, Explorer, and Explorer APIs by October 28, 2026, though Allium Assistant and its Model Context Protocol service remained unavailable.

Investigation and security review

• ▪Allium stated it plan to publish a summary of findings and corrective measures after completing its independent cybersecurity investigation.
• ▪Allium hired an independent cybersecurity firm to investigate the October 25, 2026 breach and review security controls

Enterprise clientele and impact

• ▪Allium provides structured blockchain data infrastructure to major enterprise clients, including Visa, Stripe, and Coinbase.
• ▪Allium's security disclosure does not indicate that systems owned directly by client companies Visa, Stripe, or Coinbase were breached.

Allium fundraising rounds

• ▪Allium raised $40 million in a Series B funding round led by Amplify Partners in June 2026.
• ▪Allium raised $16.5 million in a Series A fundraising round in 2024 to develop enterprise blockchain infrastructure.