Chainalysis, a company that makes a living tracking criminals in the crypto market, has become a target for hackers. The company told clients that an external intruder used “agentic offensive techniques”—in other words, artificial intelligence tools—to access its systems this month.
Chainalysis’s client list includes more than a hundred banks, as well as exchanges and government agencies. In the breach, the names of employees at these institutions fell into the hands of third parties.
What did the hackers manage to get?
According to a statement released by Chainalysis on Friday (30), the attacker obtained user IDs, full names, email addresses, and job titles.
The company says it found no signs of access to case files, passwords, access codes, or session tokens, and classifies the stolen information as “not sensitive.”
“Our teams have been working around the clock to investigate unauthorized access, fix vulnerabilities, and strengthen our systems,” Chainalysis said.
Agentic AI is a type of software that plans and carries out tasks autonomously, step by step. The company did not say how much of the attack was conducted exclusively by artificial intelligence.
What did the hackers manage to obtain?
According to a statement released by Chainalysis on Friday, the attacker obtained user IDs, full names, email addresses, and job titles.
Chainalysis says there are no signs of access to case files, passwords, access codes, or session tokens. The company classifies the stolen information as “not sensitive.”
“Our teams have been working around the clock to investigate unauthorized access, fix vulnerabilities, and strengthen our systems,” the team said in a statement.
Agentic AI is software that plans and carries out tasks autonomously, step by step. Chainalysis did not specify how much of the breach was carried out solely by artificial intelligence.
‼️ Chainalysis, the firm that tracks crypto hackers, was hacked itself.
It told customers in an email seen by ICD that an attacker using "offensive agentic techniques" accessed users' names, emails and role labels.
It says this has nothing to do with the $6.3B Binance heist. pic.twitter.com/X5TeZmhxoh
— International Cyber Digest (@IntCyberDigest) October 30, 2026
North Korea again?
Even without passwords, the stolen data has value. The combination of a name, email, and job title tells the attacker exactly whom to target at each bank, exchange, or government agency, paving the way for targeted phishing scams.
The week has already shown the damage a single target can cause. According to Binance’s initial findings, the record $6.3 billion theft began with the compromise of just one engineer’s laptop.
Chainalysis says the breach of its systems is unrelated to the Binance incident, although it is among the companies investigating where the stolen funds went. CEO Jonathan Levin pointed to North Korea.
“North Korea is repeating old tactics,” Levin said.
AI versus AI
To contain the attack, Chainalysis hired external security experts and began using large language models—the technology behind chatbots—to identify potential vulnerabilities in its systems.
The crypto market has seen similar data leaks before. In 2020, wallet manufacturer Ledger reported that around one million customer email addresses had been exposed. The company later warned users about phishing attempts that exploited the leaked data.
In Chainalysis’s case, AI was used to break in and is now being used to defend. Meanwhile, the company’s customers are still waiting to learn which names were exposed.
The article Chainalysis, a company that tracks crypto hackers, suffers AI-powered breach was first published on BeInCrypto Brasil.