Loading...
Chainstack, a blockchain infrastructure service provider, disclosed that it suffered an AI-driven cyberattack from October 26 to 31, 2026. The attackers gained access to the development environment via a Grafana instance with unmodified default credentials, used an unauthenticated MCP tool server to obtain cluster administrator privileges, and then used an automation platform to steal credentials to access the production environment and read customer databases. This incident resulted in the exposure of the client's organization name, account holder name, member email addresses, and password hashes. Attackers gained access to the system storing node credentials, prompting Chainstack to require the client to rotate their node credentials.