Chainalysis Says an Attacker Using "Offensive Agentic Techniques" Accessed Customer Names and Emails

Blockchain analytics firm Chainalysis says an attacker got into its systems and internal tools in October and accessed details of the people who use its platform. The data accessed was user IDs, full names, email addresses and organisation role labels for users provisioned on the platform, the company said.

Its post, dated 30 October, places the intrusion in "this month" and says the company detected "an external actor using offensive agentic techniques" to gain unauthorised access, without describing what those techniques were. Nor has it said which vulnerabilities were exploited, which internal tools were reached or how long the attacker was inside, BleepingComputer notes.

How many customers are affected isn't public either.

The firm has run an Asia-Pacific office in Singapore since 2020, but no source says whether users in the region are among them.

What wasn't taken

So far, Chainalysis says, there's no sign the attacker reached investigation content such as graphs, notes or cases, transaction or query results, clear-text passwords, MFA secrets or session tokens. It is still working out which records were accessed for each organisation and will send each one a breakdown.

Not the Binance theft

The disclosure came days after the Binance hot-wallet theft, which Chainalysis itself tied to North Korea's TraderTraitor, as the FBI later did (our report on the FBI attribution). The company says its own incident "is not related to the recent crypto theft at Binance".

The breach was first flagged by International Cyber Digest, and Chainalysis declined to answer The Block's follow-up questions. A spokesperson told BleepingComputer the company is working with external cybersecurity experts.

What Chainalysis users should do

Chainalysis tells users to watch for unexpected password reset requests or authentication prompts and says organisations that haven't enabled two-factor authentication should do so.