Chainalysis Says Intruder Accessed Internal Tools and Customer Data

Chainalysis has disclosed that it was the target of a cybersecurity incident in which an external actor accessed internal systems and tools. The company said the breach did not grant access to its investigation content, authentication credentials, or session tokens.

It confirmed that non-sensitive customer data was accessed, including user IDs, full names, email addresses, and organisation role labels for users provisioned on its platform, with some data relating to organisations and their users appearing to be exposed. Chainalysis stated it is patching vulnerabilities and hardening its systems in response to the incident.

The firm characterised the intrusion as one where an external actor used “offensive agentic techniques” to gain entry, suggesting the use of an AI-powered tool, though it did not provide details on the exact methods or tactics employed. Chainalysis noted an industry-wide rise in AI-driven cyber attacks and said it is taking a whole-of-company approach to align its security posture with evolving threats and customer expectations.

The report also references broader context, including other actors leveraging AI-enabled attack chains and tooling at scale, while emphasising that the incident’s impact was limited to certain non-sensitive customer data and not to investigative content or credentials.