Blockchain analytics firm Chainalysis has confirmed a cyberattack in which an outside attacker used what the company calls "offensive agentic techniques" to gain access to its systems and internal tools, exposing some customer account details. In a notice published on 30 October, the company said the attacker accessed user IDs, full names, email addresses and organisation role labels. Chainalysis described that information as non-sensitive, but names, work email addresses and role labels can still help criminals craft convincing messages aimed at specific employees.

No evidence investigation data was reached

Chainalysis said its investigation has so far found no evidence that customer investigation content, such as graphs, notes or cases, or transaction and query results were accessed. It also said there was no evidence of access to passwords in clear text, multi-factor authentication secrets or user session tokens. The company has notified all of its customers and brought in outside cybersecurity experts, and it is still working out which records were accessed for each customer organisation, promising each one a detailed breakdown once that analysis is complete.

The company stressed that the incident is unrelated to the recent $6.3 billion theft from crypto exchange Binance, a connection readers might otherwise assume, since Chainalysis is one of the firms helping to trace the stolen Binance funds. It has not named the attacker, disclosed the entry point, or published how many users or organisations were affected, and it has not explained how the agentic techniques worked in this incident. The disclosure therefore confirms a data-access breach, not an asset theft, with the full scale still unclear.