Allium security breach disrupts services used by Visa, Stripe, Coinbase

Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations and service interruptions following an October 25 security incident. Allium identified unauthorized access to certain systems on October 25 and hired an independent cybersecurity investigator. The company restored its primary application and Explorer APIs after several days of service interruptions. Allium revoked existing API keys and recommended password changes and multifactor authentication for customers. Some datasets required backfilling, while Allium Assistant and its MCP service remained unavailable during recovery.