Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposed

Blockchain analytics firm Chainalysis said on Oct 30 2026 that this month it detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools. Some non-sensitive customer data was accessed: user IDs, full names, email addresses and organization role labels for users provisioned on its platform. Based on evidence so far, it found no indication of unauthorized access to investigation content (graphs, notes or cases), transaction or query results, clear-text passwords, MFA secrets or user session tokens. Chainalysis says it is patching the exploited vulnerabilities with outside experts, has notified all customers and will give each organization a breakdown of its accessed records. It says the incident is not related to the recent Binance crypto theft.

Why this severity: Confirmed unauthorized access to internal systems and tools; exposed customer data limited so far to user IDs, names, emails and role labels; number of affected users not disclosed

Started

Oct 30, 2026

• #Chainalysis
• #Crypto
• Data breach
• #AI agents