Chainalysis got hit too.
On October 30, the company issued a statement saying that earlier this month, an external attacker used “agentic attack techniques” to access the company’s systems and internal tools. The information exposed included platform users’ IDs, full names, email addresses, and organizational role labels. The company said it has found no evidence that investigation content, transaction and query results, plaintext passwords, MFA keys, or session tokens were accessed. It also made a point of saying that this incident was unrelated to the Binance hack.
Don’t frame this as “AI hacked its way in by itself”—the company didn’t say that. It said the attacker used agentic techniques, not that AI acted on its own.
My take: when an on-chain investigation company’s internal tools are breached, a leaked user list is more troubling than leaked passwords. Who uses Chainalysis, which organization they work for, and what their role is could all be used for targeted phishing. Organizations that use it should be especially wary of fake password-reset emails and login prompts. That’s what the company advised, too. If you haven’t enabled two-factor authentication, do it now.
On October 30, the company issued a statement saying that earlier this month, an external attacker used “agentic attack techniques” to access the company’s systems and internal tools. The information exposed included platform users’ IDs, full names, email addresses, and organizational role labels. The company said it has found no evidence that investigation content, transaction and query results, plaintext passwords, MFA keys, or session tokens were accessed. It also made a point of saying that this incident was unrelated to the Binance hack.
Don’t frame this as “AI hacked its way in by itself”—the company didn’t say that. It said the attacker used agentic techniques, not that AI acted on its own.
My take: when an on-chain investigation company’s internal tools are breached, a leaked user list is more troubling than leaked passwords. Who uses Chainalysis, which organization they work for, and what their role is could all be used for targeted phishing. Organizations that use it should be especially wary of fake password-reset emails and login prompts. That’s what the company advised, too. If you haven’t enabled two-factor authentication, do it now.