Chainalysis says external actor accessed customer data

Chainalysis has disclosed a security incident in which an external actor employed “offensive agentic techniques” to gain unauthorised access to internal systems and tools. In a post dated 30 October 2026, the firm said that some non-sensitive customer data—including user IDs, full names, email addresses and organisation role labels for users provisioned on its platform—were accessed.

It is still conducting an analysis to determine exactly which records from which organisations were affected and will provide a detailed breakdown once complete.

The firm stressed that the incident is not related to the Binance heist reported last week and asserted there was no evidence that investigation content such as graphs, notes, cases or transaction query results was accessed. It also said there is no evidence that clear-text passwords, MFA secrets or user session tokens were compromised.

Chainalysis warned customers to remain vigilant for unusual password reset requests or authentication prompts and recommended enabling two-factor authentication if not already in use. The company said it is working around the clock to investigate the activity, patch affected vulnerabilities and harden its systems, having engaged third-party cybersecurity experts and, it said, using large language models to support a broader security review.