Chainalysis has detected that external attackers exploited offensive agent technology to gain unauthorized access to its systems and internal tools. The breach exposed some customers' user IDs, names, email addresses, and organizational role tags. As of now, there is no evidence of unauthorized access to investigation content, transactions or query results, plaintext passwords, multi-factor authentication keys, or user session tokens. The company has notified affected customers and is collaborating with third-party cybersecurity experts to investigate and remediate the vulnerability. Chainalysis is also leveraging large language models to help review platform security. The company emphasized that this incident is unrelated to the recent Binance crypto asset theft.
