Chainalysis confirms intrusion exposed customer names and emails
Original title: Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
An external actor reached internal tools and user IDs, names, emails and role labels; investigation data and credentials were not accessed.
Chainalysis said this month it detected an external actor using what it called offensive agentic techniques to reach its systems and internal tools. Data accessed included user IDs, full names, email addresses and organization role labels for users provisioned on the platform. The company said investigation content, authentication credentials and session tokens were not accessed, and that it is patching vulnerabilities and hardening systems. It did not describe the methods used.
Unconfirmed: Chainalysis calls the exposed data non-sensitive and does not describe how access was gained.
- Chainalysis detected the intrusion this month and disclosed it Friday.
- Exposed fields were user IDs, full names, emails and organization role labels.
- Investigation content, credentials and session tokens were not accessed, the company said.
- The firm gave no details on the agentic techniques it cited.
Impact: Customer names, emails, user IDs and role labels exposed
From the original article
1 min read at thehackernews.com
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.