Blockchain analytics company Chainalysis has disclosed a cybersecurity breach in which an external attacker used offensive agentic techniques to gain unauthorized access to its internal systems and tools.
The company confirmed that some customer information was accessed, including user IDs, full names, email addresses and organizational role labels associated with accounts registered on its platform.
- Chainalysis confirmed that attackers used offensive agentic techniques to compromise internal systems and tools, exposing customer user information.
- Accessed data included names, email addresses, user IDs and organizational roles, but the company found no evidence that investigation records, passwords or session tokens were compromised.
- The company has notified customers, engaged external cybersecurity specialists and confirmed that the incident is unrelated to the recent Binance crypto theft.
Chainalysis said its investigation had found no evidence that attackers accessed investigation content, authentication credentials or active user sessions.
The company has notified its customers and is working with external cybersecurity specialists to determine the full extent of the breach and strengthen its systems.
Chainalysis data breach exposes customer account information
According to Chainalysis, the attacker gained access to internal infrastructure and tools during the current month using techniques involving autonomous AI capabilities.
The company has not disclosed the identity of the attacker, the specific vulnerabilities exploited or the number of affected customers.
Its investigation has established that certain user information was accessed, including account identifiers, names, email addresses and organizational role labels.
Chainalysis said it had found no indication that the incident compromised sensitive investigation materials, including graphs, notes, cases, transaction results or query results.
The company also reported no evidence of unauthorized access to clear-text passwords, multifactor authentication (MFA) secrets or user session tokens.
These findings remain preliminary as the investigation continues. Chainalysis is determining which individual records were accessed and plans to provide affected organizations with a detailed breakdown once that analysis is complete.
Chainalysis investigates AI-driven cyberattack and strengthens security
Chainalysis said it was responding to an increase in AI-driven cyberattacks affecting technology companies.
Following the discovery, its security teams began investigating unauthorized activity, patching vulnerabilities and implementing additional protections across the platform.
The company has engaged third-party cybersecurity specialists and is using advanced large language models to conduct a broader security review. That assessment extends beyond the vulnerabilities exploited during the incident and is intended to identify weaknesses elsewhere in its infrastructure.
Chainalysis has advised customers to remain alert to unexpected password reset requests and authentication prompts.
Organizations that have not enabled two-factor authentication have been encouraged to activate it, with support available through their Chainalysis account managers.
The company also confirmed that the cybersecurity incident is unrelated to the recent cryptocurrency theft involving Binance.
Chainalysis said it would continue notifying customers as its investigation progresses, including providing organization-specific information about accessed records.
The company has not established a final scope for the breach or disclosed when its investigation is expected to conclude.
