# Crypto's Data Vendors Become the Attack Surface

Breaches at analytics, data and support vendors to exchanges and payment firms will keep recurring and will expose user identities and access credentials without touching on-chain funds, which shifts security spending toward vendor oversight.

- Conviction: 40 / 100 (forming)
- Horizon: Emerging (watchlist)
- Tracking since: 2026-10-29T00:00:00.000Z
- Last updated: 2026-10-29T06:37:07.675Z
- Canonical: https://polylog.news/crypto/trends/crypto-data-supply-chain-breaches
- Publisher: Polylog

## Recent evidence

- [confirms] Blockchain Data Provider Allium Revokes Every Customer API Key After a Breach and Has Not Said How Attackers Got In (2026-10-29): Blockchain data provider Allium, whose customers include Visa, Stripe and Coinbase, revoked every customer API key after a breach. It has not said how attackers got in or whether customer data left its systems. Coinbase separately faces questions about an incident at the analytics vendor Amplitude. That is two vendor-side incidents touching one major exchange's data supply chain, without any on-chain funds being touched.