conv.

All stories
SecurityQuiet 10d · day 12

Chainalysis hit by AI-driven cyberattack; customer data exposed

Blockchain forensics firm confirms breach via "offensive agentic techniques" but says investigation tools and credentials remained secure.

newest coverage 9d agosummary written 12d ago18 pieces14 likes & upvotes1 comments NewswiresHacker NewsMastodon

What to know

  • Chainalysis disclosed a cyberattack on October 30 involving an external actor using AI-driven 'offensive agentic techniques' to breach its systems.
  • Non-sensitive customer data—user IDs, full names, email addresses, and organization roles—were accessed, but the company says investigation tools, credentials, and session tokens remain secure.
  • The company is working with third-party security experts and using large language models to strengthen defenses; it recommends customers enable two-factor authentication.

“Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed.”

Chainalysis · Chainalysis official statement ↗ · Oct 29

Chainalysis Blockchain forensics and compliance platform

Chainalysis hit by AI-driven cyberattack; customer data exposed
chainalysis.com

How it unfolded 1 development · click the chart to see its coverage articlesposts

Peak 5 pieces in 3h at Oct 30, 3 PM; 18 pieces over 12 days (8 articles · 10 posts) Oct 30, 3 PM — 5 pieces · 4 articles · 1 post — Newswires 4, Hacker News 1Oct 30, 6 PM — quietOct 30, 9 PM — quietOct 31, 12 AM — quietOct 31, 3 AM — quietOct 31, 6 AM — 1 piece · 1 post — Mastodon 1Oct 31, 9 AM — 1 piece · 1 post — Mastodon 1Oct 31, 12 PM — quietOct 31, 3 PM — quietOct 31, 6 PM — 1 piece · 1 post — Hacker News 1Oct 31, 9 PM — 1 piece · 1 post — Mastodon 1Nov 1, 12 AM — 1 piece · 1 post — Mastodon 1Nov 1, 2 AM — 1 piece · 1 post — Mastodon 1Nov 1, 5 AM — quietNov 1, 8 AM — quietNov 1, 11 AM — quietNov 1, 2 PM — quietNov 1, 5 PM — quietNov 1, 8 PM — quietNov 1, 11 PM — 1 piece · 1 post — Mastodon 1Nov 2, 2 AM — 1 piece · 1 article — Mastodon 1Nov 2, 5 AM — 1 piece · 1 article — Newswires 1Nov 2, 8 AM — quietNov 2, 11 AM — quietNov 2, 2 PM — quietNov 2, 5 PM — quietNov 2, 8 PM — quietNov 2, 11 PM — quietNov 3, 2 AM — quietNov 3, 5 AM — quietNov 3, 8 AM — quietNov 3, 11 AM — quietNov 3, 2 PM — quietNov 3, 5 PM — quietNov 3, 8 PM — quietNov 3, 11 PM — quietNov 4, 2 AM — quietNov 4, 5 AM — 1 piece · 1 post — Mastodon 1Nov 4, 8 AM — quietNov 4, 11 AM — quietNov 4, 2 PM — quietNov 4, 5 PM — 1 piece · 1 article — Newswires 1Nov 4, 8 PM — quietNov 4, 11 PM — quietNov 5, 2 AM — quietNov 5, 5 AM — quietNov 5, 8 AM — quietNov 5, 11 AM — quietNov 5, 2 PM — quietNov 5, 5 PM — 1 piece · 1 post — Mastodon 1Nov 5, 8 PM — quietNov 5, 11 PM — quietNov 6, 2 AM — quietNov 6, 5 AM — quietNov 6, 8 AM — quietNov 6, 11 AM — 1 piece · 1 article — Newswires 1Nov 6, 2 PM — quietNov 6, 5 PM — quietNov 6, 8 PM — quietNov 6, 11 PM — quietNov 7, 2 AM — quietNov 7, 5 AM — quietNov 7, 8 AM — quietNov 7, 11 AM — quietNov 7, 2 PM — quietNov 7, 5 PM — quietNov 7, 8 PM — quietNov 7, 11 PM — quietNov 8, 2 AM — quietNov 8, 5 AM — quietNov 8, 8 AM — quietNov 8, 11 AM — quietNov 8, 2 PM — quietNov 8, 5 PM — quietNov 8, 8 PM — quietNov 8, 11 PM — quietNov 9, 2 AM — quietNov 9, 5 AM — quietNov 9, 8 AM — quietNov 9, 11 AM — quietNov 9, 2 PM — quietNov 9, 5 PM — quietNov 9, 8 PM — quietNov 9, 11 PM — quietNov 10, 2 AM — quietNov 10, 5 AM — quietNov 10, 8 AM — quietNov 10, 11 AM — quietNov 10, 2 PM — quietNov 10, 5 PM — quietNov 10, 8 PM — quietNov 10, 11 PM — quietYesterday, 2 AM — quietYesterday, 5 AM — quietYesterday, 8 AM — quietYesterday, 11 AM — quietYesterday, 2 PM — quietYesterday, 5 PM — quietYesterday, 8 PM — quietYesterday, 11 PM — quiet 1
Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9Nov 10now · 12:10 AM ET
  1. 1

    Chainalysis engages third-party security experts and recommends 2FA

    The company stated it has engaged third-party cybersecurity experts and is using large language models to review and strengthen platform security. Chainalysis advised users to enable two-factor authentication and remain vigilant for unexpected password reset requests.

    “We are seeing an industry-wide rise in AI-driven cyberattacks, and we are taking a whole-of-company approach to make sure our security posture meets the evolving environment.”
    — Chainalysis
    1. 2 outlets Chainalysis says cybersecurity incident exposed some customer data

      first by Blockchain.News, 12d ago · also Chainalysis

      1 more headline
    • beyondmachines1@infosec.exchange

      Chainalysis Repoers Data Breach Driven by AI Agentic Techniques Chainalysis suffered a data breach where attackers used AI-driven agentic techniques to access internal systems and exfiltrate customer metadata. The company is working with external experts and using LLMs to harden its platform against further automated attacks. **** # cybersecurity…

      beyondmachines1@infosec.exchangeMastodon10d agoview on Mastodon ↗
    2 more of the top 3 · 7 posts in this stretch
    • zackwhittaker@mastodon.social

      Per @ kevincollier , Chainalysis disclosed it was recently hacked. "Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users." Company doesn't say when the breach happened…

      zackwhittaker@mastodon.socialMastodon11d agoview on Mastodon ↗
    • DevaOnBreaches@infosec.exchange

      Blockchain intelligence firm Chainalysis has disclosed a # databreach after attackers used "offensive agentic techniques" to access internal systems. The exposed customer data includes names, email addresses, user IDs, and organizational roles. https://www. bleepingcomputer.com/news/secu…

      DevaOnBreaches@infosec.exchangeMastodon11d agoview on Mastodon ↗
    all of them →
  2. background

    Chainalysis discloses breach; non-sensitive customer data accessed — Chainalysis publicly disclosed the security incident, confirming that some non-sensitive customer data including user IDs, full names, email addresses, and organization role labels were accessed. The company stated that investigation content, credentials, MFA secrets, and session tokens showed no evidence of unauthorized access.

  3. background

    Chainalysis detects cyberattack using offensive agentic techniques — An external actor gained unauthorized access to Chainalysis systems and internal tools using what the company described as "offensive agentic techniques." The company detected the incident and began investigation and remediation efforts.

Also covered reported alongside — the timeline has no entry for these yet

  1. 2 outlets Chainalysis Discloses Customer Data Breach, Says Binance Theft Is Unrelated

    first by Bitcoin Insider, 12d ago · also SecurityWeek

    1 more headline

and 4 smaller pieces

What people are saying 4 voices from 1 site · best of 7 · verbatim