The company urges vigilance for unexpected authentication prompts as it determines which customer records were accessed.
The Chainalysis breach exposed customer names, email addresses, user IDs and organization role labels, the blockchain analytics company said. It urged users to scrutinize unexpected password-reset requests and authentication prompts.
In an Oct. 30 disclosure, the company said it detected an external actor gaining unauthorized access to its systems and internal tools that month. It was still determining which records had been accessed for each affected organization and promised detailed breakdowns when that work was complete.
The disclosure lists data categories without establishing that every listed field was accessed for every user. It did not give an affected-record total, identify the intruder or specify the exploited vulnerabilities. It also said the incident was unrelated to the recent crypto theft involving Binance.
Based on the evidence available at disclosure, Chainalysis said it had found no indication of unauthorized access to investigation content, including graphs, notes or cases; transaction or query results; clear-text passwords; multifactor authentication secrets; or user session tokens. The finding remains provisional while the investigation continues.
Chainalysis said it had notified all customers and engaged third-party cybersecurity experts. Its response included investigating unauthorized activity, patching vulnerabilities and strengthening systems. The company characterized the intruder's methods as “offensive agentic techniques,” but did not provide a technical account explaining how AI was used.
Source link
