Allium has not disclosed how the unauthorized access happened or what data it reached; Visa, KPMG and Coinbase are among the firms that use its data. Allium revoked existing API keys on Oct. 28 and plans to share a summary of findings once its investigation, supported by an outside cybersecurity firm, ends.