Chainalysis cyberattack exposes customer names and emails
Original title: Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques
Chainalysis detects AI-driven attack exposing user IDs, names, and emails but not passwords or investigation data.
Chainalysis suffered a cyberattack where an external actor used offensive agentic AI techniques to access systems and internal tools. The attacker stole non-sensitive customer data including user IDs, full names, email addresses, and organization role labels. No access to investigation content, transaction results, passwords, MFA secrets, or session tokens was found.
- Attacker used AI agents for access
- Exposed data includes user IDs, names, emails
- Investigation data remains safe
- No passwords or MFA secrets accessed
- Company hiring experts and using LLMs for review
Impact: exposure of customer names, emails, and user IDs
- 1.enable 2FA
- 2.watch for password reset requests
- Organizations
- Chainalysis
From the original article
2 min read at securityaffairs.com
Chainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of a cybersecurity incident. A threat actor accessed its systems and internal tools and stole some non-sensitive customer data.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.