Hackers turned AI agents on Chainalysis — and took customer names and emails

Chainalysis said on October 30 that an outside actor used what it calls “offensive agentic techniques” to gain unauthorized access to its systems and internal tools, and told customers that some non-sensitive data was reached: user IDs, full names, email addresses and organization role labels for users on its platform.

What was not touched is the reassuring half of the disclosure: Chainalysis says it has found no indication that investigation content such as graphs, notes or cases, transaction or query results, clear-text passwords, multi-factor authentication secrets or session tokens were accessed — and it stresses the incident is unrelated to the Binance theft it has been helping to trace.

Customers were warned to watch for unexpected password-reset or authentication prompts and to turn on two-factor authentication if they have not, while Chainalysis says it is working around the clock with outside cybersecurity experts, patching the exploited vulnerabilities and using large language models to review its own defenses; who got in, how, and how many customers were hit remain undisclosed.