Science & Tech · Cybersecurity · 2 hrs ago
Chainalysis says attackers accessed customer identity data
Blockchain analytics firm Chainalysis says an outside actor accessed its internal systems and tools earlier this month.
The company provides services to law enforcement, government agencies, cryptocurrency exchanges and financial institutions investigating crypto transactions and crimes.
The accessed customer data included names, email addresses, user IDs and role labels for people using its platform.
Chainalysis says it has found no evidence that investigation content, authentication credentials or session tokens were accessed.
The company has not explained how the intrusion worked, including which vulnerabilities or tools were involved.
It is patching vulnerabilities, strengthening its systems and working with outside cybersecurity experts; it is also using large language models in a wider security review.
Chainalysis is still identifying which records were accessed and says it will give affected customers a detailed breakdown when that analysis is complete.
Customers are advised to use two-factor authentication and watch for unexpected login prompts, password reset requests and impersonation scams.
Chainalysis disclosed that an external actor accessed its internal systems and tools using what the company called “offensive agentic techniques.”
The accessed customer information included user IDs, full names, email addresses and organizational role labels.
Chainalysis said it found no evidence that investigation content, authentication credentials or session tokens were accessed.
The company is working with external cybersecurity experts, patching vulnerabilities and hardening its systems.
It advised customers to enable two-factor authentication and watch for phishing attempts and impersonation scams.
- Who
- An external actor accessed Chainalysis systems and tools. Some customer information was affected.
- What
- The company disclosed unauthorized access to internal systems and exposure of customer identity data.
- When
- Chainalysis said it detected the intrusion earlier this month and disclosed it on Friday.
- Where
- Chainalysis’s internal systems and tools. The company’s location is not stated.
- Why
- The reason for the intrusion is not stated.
This story does not have two clearly opposing sides.
Chainalysis detected an external actor using offensive agentic techniques to access its systems and internal tools.
Chainalysis has been patching vulnerabilities and hardening its systems.
Chainalysis published a security incident disclosure and sent an email to affected customers.
- Accessed data
- User IDs, full names, email addresses and organizational role labels
- Data not evidenced as accessed
- Investigation content, authentication credentials and session tokens
- Discovery
- Earlier this month
- Customer advice
- Enable two-factor authentication and watch for phishing and impersonation scams
3 sources
What people are saying
Based on the investigation to date, we have found no evidence of unauthorized access to investigation content, authentication credentials, or session tokens
This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools
We are seeing an industry-wide rise in AI-driven cyber attacks, and we are taking a whole-of-company approach to make sure our security posture meets the evolving environment and our customers' expectations