Chainalysis data breach via offensive agentic techniques

Attackers accessed customer IDs, names, and emails using offensive agentic techniques; no access to investigation data.

Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. In October, the company detected external attackers using “offensive agentic techniques” to gain access to Chainalysis systems and internal tools. Based on the evidence available to date, the attackers managed to access some customer IDs, full names, email addresses, and organization role labels for users provisioned on the company’s platform. No indication that these incidents resulted in the unauthorized access of investigation content, transaction or query results, passwords in clear text, MFA secrets, or user session tokens. Chainalysis sent out an email alert to impacted customers, urging them to be on the lookout for unexpected password reset requests or authentication prompts and to enable two-factor authentication. Third-party cybersecurity experts have been called in to help with the investigation.

Unconfirmed: The exact offensive agentic techniques used by the attackers