Chainalysis said on Friday, October 30, that it was the target of a cybersecurity incident in which an external actor gained unauthorized access to its systems and internal tools. The blockchain analytics firm says it has notified all customers and brought in outside experts to investigate and harden its defenses.
What happened
In a blog post, Chainalysis says it detected an external actor this month using "offensive agentic techniques" to gain unauthorized access to its systems and internal tools. The company frames the attack as part of an industry-wide rise in AI-driven cyberattacks, "similar to many other tech platforms in recent weeks."
Chainalysis states the incident is not related to the recent crypto theft at Binance.
What data was accessed
According to the email sent to impacted customers and published in full on the blog, the attacker accessed "non-sensitive" data for users provisioned on the platform:
- user IDs
- full names
- email addresses
- organization role labels
The company says that, based on the evidence available so far, it has found no indication of unauthorized access to:
- investigation content - graphs, notes or cases
- transaction or query results
- passwords in clear text, MFA secrets or user session tokens
Chainalysis is still determining which records were accessed for each organization and promises a detailed breakdown once that analysis is complete.
What the company has done
- its teams say they are working around the clock to investigate the unauthorized activity, patch vulnerabilities and harden its systems
- engaged third-party cybersecurity experts
- is using large language models to support a broader review of the platform's security
- proactively notified all customers - some had already been notified earlier and are now receiving an update
The company says the review extends beyond the exploited vulnerabilities to the security posture of the entire platform, through what it calls a whole-of-company approach.
What it means for you
If you use Chainalysis, the company advises you to stay "hyper-vigilant" about unexpected password reset requests or authentication prompts you did not initiate.
If your organization has not yet enabled two-factor authentication, Chainalysis strongly recommends doing so - your account manager can help complete the process. The company says it will send each organization relevant updates as the investigation progresses and that it regrets the incident occurred.