Chainalysis said an intruder used agentic techniques to access its systems and some customer data, while the firm works to determine which records were accessed for each organization.
The records included user IDs, full names, email addresses and labels for users’ roles within their organizations, the company said. Chainalysis is still determining which records were involved at each organization and plans to provide details after that review. EconoTimes previously covered the customer identity data disclosed in the incident.
The company said its investigation has not found evidence that the intruder accessed investigative content, transaction or query results, clear-text passwords, multifactor authentication secrets or session tokens.
Chainalysis detected the activity in October and described the approach as “offensive agentic techniques.” It did not identify the actor or explain how the methods were used. The firm also characterized AI-driven cyberattacks as increasing across the industry, without citing examples or figures.
The company said it has brought in outside cybersecurity specialists, is addressing vulnerabilities and is using large language models in a broader platform security review. It advised users to be alert to unexpected password-reset requests and authentication prompts, and recommended that organizations enable two-factor authentication if they have not already.
Chainalysis says its blockchain data platform serves government agencies, exchanges, financial institutions and cybersecurity companies in more than 70 countries. It said it will share organization-specific information once its review identifies which records were accessed.
