{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposed · updates",
  "home_page_url": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026",
  "feed_url": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026/feed.json",
  "description": "Blockchain analytics firm Chainalysis said on Oct 30 2026 that this month it detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools. Some non-sensitive customer data was accessed: user IDs, full names, email addresses and organization role labels for users provisioned on its platform. Based on evidence so far, it found no indication of unauthorized access to investigation content (graphs, notes or cases), transaction or query results, clear-text passwords, MFA secrets or user session tokens. Chainalysis says it is patching the exploited vulnerabilities with outside experts, has notified all customers and will give each organization a breakdown of its accessed records. It says the incident is not related to the recent Binance crypto theft.",
  "language": "en",
  "_pwn": {
    "slug": "chainalysis-internal-systems-unauthorized-access-oct-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026#2026-10-30-d86b5079",
      "url": "https://pwn.watch/i/chainalysis-internal-systems-unauthorized-access-oct-2026#2026-10-30-d86b5079",
      "title": "Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposed: Chainalysis publishes a security incident notice: this month it detected an external actor using offensive agentic techniques to gain unauthorized access to its systems and internal tools. It says user IDs, full names, email addresses and organization role labels of provisioned users were accessed, but it has found no indication of access to investigation content, transaction or query results, clear-text passwords, MFA secrets or session tokens. It says it has notified all customers and that the incident is unrelated to the Binance theft.",
      "content_text": "Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposed: Chainalysis publishes a security incident notice: this month it detected an external actor using offensive agentic techniques to gain unauthorized access to its systems and internal tools. It says user IDs, full names, email addresses and organization role labels of provisioned users were accessed, but it has found no indication of access to investigation content, transaction or query results, clear-text passwords, MFA secrets or session tokens. It says it has notified all customers and that the incident is unrelated to the Binance theft.\n\nSource: https://www.chainalysis.com/blog/security-incident-october-30/",
      "date_published": "2026-10-30T00:00:00.000Z",
      "external_url": "https://www.chainalysis.com/blog/security-incident-october-30/",
      "tags": [
        "medium"
      ]
    }
  ]
}