Chainalysis discloses breach after AI driven cyberattack

Chainalysis has disclosed a data breach following an AI-driven cyberattack in October 2026, with the company stating that an external actor used offensive agentic techniques to gain unauthorised access to its systems and internal tools. The incident is described as separate from the recent Binance heist attributed to North Korean threat actors. Chainalysis emphasised that investigation content, transaction or query results, passwords in clear text, and other credentials were not compromised.

What was accessed appears to be non-sensitive customer data, including user IDs, full names, email addresses, and organisation role labels for users provisioned on the platform. The firm said it is still assessing the full scope and has not disclosed how many individuals might have been affected.

Chainalysis said its teams have been working around the clock to investigate unauthorised activity, patch vulnerabilities, and harden its systems, and that it has engaged external cybersecurity experts and large-language models to review and improve its security posture. The company notes an industry-wide rise in AI-driven cyberattacks and urges users to watch for unexpected authentication prompts and password-reset requests, reminding them to ensure MFA is enabled. All claims are attributed to Chainalysis, which stated it is continuing to investigate and update stakeholders as the review progresses.