Allium, a blockchain-data provider used by companies including Visa, Stripe and Coinbase, disclosed unauthorized access to some of its systems. Its core services later came back online, but customers still faced limits on uploaded data and delays as Allium checked and repaired affected data feeds.
- Allium detected unauthorized access on October 25; the incident timeline does not specify a year.
- Its application, Explorer and associated APIs were operational by an October 28 recovery update.
- Data access and feed repairs were still incomplete in that update.
- No available information establishes whether customer data was accessed or stolen, or whether customers’ own systems were compromised.
Services returned, but recovery was still underway
Allium organizes blockchain activity into structured datasets that businesses use for analytics and other applications. A disruption to the service can limit customers’ access to data even while the blockchains themselves continue operating.
According to Allium’s incident timeline, its Explorer became unavailable on October 25. The company temporarily took its application offline the next day as a precaution. In an October 28 recovery notice, Allium said its main application, Explorer and associated APIs were operational again. The notices do not specify the year for these dates.
Still, not every part of the service was fully restored. Allium said it had disabled access to previously uploaded datasets and the ability to upload new data. It also reported interruptions to data feeds delivered through Snowflake, Databricks and Google BigQuery. Allium later restarted data distribution while checking for missing records and backfilling affected data.
Backfilling means restoring historical records that were missed during a disruption. That matters because a feed can resume before its dataset is complete. A query may run successfully and still return incomplete results if older records have not been restored. That is a general risk, not evidence that Allium customers received incorrect data.
Allium also said it was revoking existing API keys. An API key is a credential that lets software connect to a service. Customers were instructed to get replacement keys. The company also recommended resetting passwords and enabling multifactor authentication, which requires an additional form of verification at login.
What is known and what remains unclear
Allium said it restricted access, notified affected customers and hired an independent cybersecurity firm to investigate. CEO and co-founder Ethan Chan apologized for the disruption, saying: “We’re sorry for the disruption this has caused our customers, ”
The available information does not explain how the unauthorized access happened, which systems or data were involved, or whether customer information was accessed, copied or stolen. It also does not establish that Visa, Stripe, Coinbase or any other customer had its own systems compromised. A security incident at a data provider does not prove that its customers were breached. But the lack of confirmed exposure does not prove that no data was exposed.
For businesses that use blockchain data, the incident highlights a practical dependency: a provider can make raw activity easier to analyze, but an outage or incomplete feed can interrupt that work. “Back online” describes availability. It does not confirm that every dataset is fresh and complete. In its recovery update, Allium had not provided a timeline for completing all verification and data repairs.
Key questions and answers
-
Were Allium’s core services restored?
Yes. In its October 28 recovery update, Allium said its main application, Explorer and associated APIs were operational.
-
Were all datasets complete?
That was not established. Allium was checking the data and restoring missing records after feeds were interrupted.
-
Was customer information stolen?
That remains unknown. The available information does not establish whether customer data was accessed or taken.
-
Were Visa, Stripe or Coinbase systems compromised?
No such compromise has been established. Allium’s incident alone does not show that a customer’s systems were accessed.
-
What remains unknown?
How the access occurred, the full scope of affected systems or data, and when all data repairs and verification would be complete.
