Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Summary

Chainalysis, an American blockchain analysis firm, said an external actor used offensive agentic techniques to gain unauthorized access to its systems and internal tools this month. Non-sensitive customer data, including user IDs, full names, email addresses and organization role labels, was accessed, but investigation content, authentication credentials and session tokens were not.

Mitigation

The company said it is patching vulnerabilities and hardening its systems in response to the incident.

Related items

• LowChainalysis discloses data breach from "offensive agentic techniques"Similar attack · BleepingComputer
• InfoVulnerabilities and Defenses in Audio-Visual Attacks: A Survey From Audio to Multimodal ModelsSimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
• MediumAppraisal by AI: Model-driven victim prioritization in the VOLTA infostealerSimilar attack · Cisco Talos Blog
• MediumA Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsSimilar attack · The Hacker News
• HighCVE-2026-63378: TAKO AI Agent for Okta code execution via execute-script endpointSimilar attack · NVD/CVE Database