What happened
Blockchain analytics firm Chainalysis disclosed that sensitive information belonging to all of its users was obtained after a breach of its network security. According to an email sent to affected customers, the stolen data includes full names, usernames, password hashes and live tokens.
Who is affected
Chainalysis's customer list is extensive: public agencies such as the FBI, US Immigration and Customs Enforcement (ICE) and the US Air Force, alongside private companies including Microsoft, Coinbase and Barclays, are listed among its customers. It remains unclear whether the stolen data exposed customers to additional threats.
How the attack unfolded
The company said last Friday that it had been the target of a cybersecurity incident in October similar to hacks of other platforms during the same month. An external actor used AI agent-assisted offensive techniques to gain unauthorized access to Chainalysis systems and internal tools.
The "non-sensitive" debate
The email to customers described data such as user IDs, full names, email addresses and organization role labels as "non-sensitive customer data." The company did not explain why it considered such information non-sensitive, and security experts note that this kind of data can still be valuable for phishing and account takeover attacks.
