Blockchain analytics firm Chainalysis said it detected an attacker in its systems and internal tools in October, and that the intruder reached basic details about the people who use its platform.
In a blog post on Oct. 30, the company published the email it had sent to affected customers. It said it detected “an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools.” The intruder reached what the company called “non-sensitive customer data,” including user IDs, full names, email addresses and the organization role labels assigned to platform users.
So far, Chainalysis said, nothing points to the attacker reaching investigation work such as graphs, notes and cases, or transaction and query results. It said the same of clear-text passwords, MFA secrets and session tokens.
The company has not said how many customers or users were affected, when the intrusion began or how the attacker got in. Chainalysis told customers a per-organization accounting of the exposed records will follow when its review wraps up. The email also said some customers had been notified before.
Get Unchained’s crypto news in your inbox with the free Unchained Daily newsletter.
What Chainalysis Is Doing
Chainalysis said it has brought in third-party security specialists and is applying large language models to a platform-wide security review that goes further than patching the vulnerabilities that were exploited. It asked users to turn on two-factor authentication if their organization hasn’t, and to treat any unexpected password-reset or sign-in request with suspicion.
The firm said the incident was “unrelated to the recent crypto theft involving Binance,” a reference to the drain of Binance’s hot wallets on Oct. 29.
Blockchain data firm Allium disclosed a security incident on Oct. 28, after detecting it on Oct. 25.
Why It Matters
Chainalysis’s customers use its tools to trace funds and build cases, so the investigation files on its platform are among the most sensitive material it holds for them. The company says it has seen no sign so far that the attacker reached them.
Chainalysis opened its email by citing “an industry-wide rise in AI-driven cyberattacks,” and its response leans on AI as well: it said it is using large language models to support its security review. By the company’s account, AI tools sit on both sides of this intrusion, with an attacker using agentic techniques and a defender answering with models.
Related Listen: Ransomware Now Runs Without Humans. Is It Time to Hack Back?
The post Chainalysis Says Agentic Attack Reached User Records, With No Sign Yet of Case Files appeared first on Unchained.
Powered by WPeMatico
