Chainalysis Says Breach Exposed Customer Identity Data

Chainalysis said an external actor gained unauthorized access to its internal systems and tools, exposing some customers’ names, email addresses, user IDs and organizational role labels. The blockchain analytics company said it had found no evidence that investigation content, authentication credentials or session tokens were accessed. The company disclosed the incident on October 30 and said it had notified customers. It is still determining which records were accessed for each organization and has not disclosed how many customers were affected. Chainalysis has not identified the attacker or provided technical details explaining how the intrusion occurred. Chainalysis described the access as involving “offensive agentic techniques,” but did not explain what that term meant in this incident or identify the method used. The company said it had engaged external cybersecurity experts and was using large language models to support a broader review of its security. It also said it was strengthening its defenses as the investigation continued. The company’s assessment that more sensitive information was not accessed is based on its investigation to date. Chainalysis said it had...