Chainalysis breach exposed customer names, emails and company roles
Chainalysis disclosed that an external actor accessed its systems and internal tools in October. Potentially exposed data includes customer names, email addresses, user IDs and organization role labels, though the company has not confirmed which fields were accessed for each organization or how many records were affected. It reported no evidence so far that investigation content, transaction or query results, clear-text passwords, MFA secrets or session tokens were accessed; the investigation is ongoing. Chainalysis notified customers, hired cybersecurity experts, patched vulnerabilities and strengthened systems. It urged users to enable two-factor authentication and watch for unexpected password-reset requests or authentication prompts. The company has not explained its reference to “offensive agentic techniques” or confirmed how AI was involved.
