Allium security breach impacts major clients
6.7 Security Allium detected unauthorized access, revoked API keys, and restored core services for clients like Visa and Coinbase. An external firm is investigating the breach.
Allium, a blockchain data provider serving major clients such as Visa, Stripe, and Coinbase, detected unauthorized access to parts of its systems on October 25, 2026. In response, the company restricted access, notified affected customers, and engaged an independent cybersecurity firm to investigate the incident. As a precaution, Allium revoked all existing API keys, instructed customers to generate new credentials, and recommended password resets along with enabling multifactor authentication. Core platform services, including the Allium App and Explorer APIs, have been restored, although some features and data uploads remain temporarily unavailable. The company has not disclosed whether sensitive information was accessed or detailed how the breach occurred. Allium plans to release a summary of its findings and remedial actions after the investigation concludes, emphasizing its commitment to transparency and customer trust.
