Chainalysis discloses breach involving customer contact data

Blockchain analytics firm Chainalysis has disclosed a security incident in which an external actor gained unauthorized access to internal systems and tools using what the company called “offensive agentic techniques.”

The company said the accessed information included user IDs, full names, email addresses, and organizational role labels for users on its platform. Chainalysis is still determining which records were accessed for each organization and said it will provide affected customers with a detailed breakdown when that analysis is complete.

Based on its investigation so far, Chainalysis said it found no evidence that investigation content, authentication credentials, or session tokens were accessed. The company said it detected the intrusion earlier this month and has been patching vulnerabilities and strengthening its systems. A spokesperson told BleepingComputer that Chainalysis is working with external cybersecurity experts and using large language models to support a broader security review.

Chainalysis has not disclosed which vulnerabilities were exploited, which internal tools were accessed, or how long the actor had access. It has also not said whether the techniques involved existing agentic security frameworks or custom-built AI agents.

The company said the incident is unrelated to the recent Binance theft. It plans to share further updates with affected customers as its investigation continues.