Chainalysis discloses data breach from "offensive agentic techniques"

Summary

Blockchain analytics firm Chainalysis disclosed a data breach after an external actor used "offensive agentic techniques" to access its internal systems and tools. Exposed customer data includes names, email addresses, user IDs, and organizational role labels, and the company says it found no evidence that investigation content, authentication credentials, or session tokens were accessed.

Mitigation

Chainalysis advises customers to enable two-factor authentication (2FA) and to watch for unexpected password reset requests, authentication prompts, and scammers impersonating Chainalysis, particularly those offering fund recovery or recruiting services.

Topics

• AI agents

Related items

• LowChainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataSimilar attack · The Hacker News
• InfoVulnerabilities and Defenses in Audio-Visual Attacks: A Survey From Audio to Multimodal ModelsSimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
• MediumAppraisal by AI: Model-driven victim prioritization in the VOLTA infostealerSimilar attack · Cisco Talos Blog
• MediumA Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsSimilar attack · The Hacker News
• HighCVE-2026-63378: TAKO AI Agent for Okta code execution via execute-script endpointSimilar attack · NVD/CVE Database