Allium, a blockchain data service provider used by major firms including Visa, KPMG, and Coinbase, reported that its datashares on platforms like Snowflake, BigQuery, and Databricks have passed historical verification checks for all supported blockchains globally. This comes as the company continues to investigate a recent security incident, which remains unresolved according to its official status page.
Security breach and service disruption
Allium discovered unauthorized access to certain systems on October 25 and publicly disclosed the breach three days later. CEO and co-founder Ethan Chan stated that the company’s response included restricting access, directly notifying affected clients, and bringing in an external cybersecurity firm to conduct an independent investigation.
The impact was felt widely: for nearly 24 hours, according to Allium’s status logs, datashare tables across all regions stopped receiving new data, from 6:09 p.m. EDT on October 26 until delivery resumed at 6 p.m. EDT on October 27. The Allium App, which provides onchain data insights, remained offline for about 61 hours, with the Explorer taken down as a precaution and only restored at 9 a.m. EDT on October 28.
During the incident, Allium made the Explorer and its API inaccessible while it assessed the potential risks. The company required all users to generate new API keys, reset passwords upon sign-in, and encouraged activating multi-factor authentication for additional security.
Mini dictionary: Allium is a data infrastructure company that provides blockchain data analytics and integration solutions for enterprises. Its services are used for querying, analyzing, and sharing onchain data through platforms like Snowflake and BigQuery.
Ongoing investigation and incomplete recovery
Chan has not detailed the method of access, the identity of the responsible party, the scope of the data reached, or whether sensitive customer information or API keys were compromised. The company has also refrained from disclosing the number of affected customers and whether the datashare disruption was directly linked to the breach itself.
Allium stated that once the independent investigation concludes, it will publish a summary describing the breach and remedial steps taken. As of Friday afternoon, this summary had not been released.
On October 28, following restoration of Explorer and the Explorer API, Allium invalidated previous API keys and advised customers to produce new keys or await replacements from their account contacts. The update also required users to set fresh passwords and consider enabling multi-factor authentication to increase account safety.
Limited functions and next steps
The company noted that, as of its latest update, features such as uploading new data or accessing previously uploaded datasets remained disabled. This restriction means that queries involving those tables could not be executed. Additionally, the Allium Assistant and Allium MCP services were not yet available for users.
Chan emphasized that improving Allium’s security practices, especially in areas such as user authentication and system monitoring, remains the company’s priority during ongoing recovery efforts.
The Allium App, Explorer UI, and Explorer Queries continued to be listed in partial outage status by Friday afternoon, with no updates regarding the full restoration of critical features.
