Blockchain analysis firm Chainalysis announced that hackers acquired sensitive personal information belonging to all its users following a network security breach. The incident, which occurred in October, was described as similar to cyberattacks that targeted other platforms during the same month. An external actor reportedly used AI agent-assisted offensive techniques to gain unauthorized access to Chainalysis systems and internal tools.
The compromised data includes names, usernames, password hashes, and live tokens. This development could represent a major coup for the attackers. In an email sent to affected customers, the company stated that some data, such as user IDs, full names, email addresses, and organizational role labels for users provisioned on the platform, had been accessed. Although Chainalysis characterized this information as "non-sensitive" customer data, the extent of the theft leaves it unclear whether customers are exposed to additional threats.
The firm's public customer list reveals several high-profile organizations. This includes government entities such as the FBI, the US Immigration and Customs Enforcement agency, and the US Air Force, alongside private companies like Microsoft, Coinbase, and Barclays. It remains unclear why the company considered the accessed information to be non-sensitive in its communication with affected users.