Data Breaches

Chainalysis Discloses Data Breach Following AI-Driven Cyberattack

The attackers used offensive agentic techniques to access the company’s systems and internal tools.

Chainalysis

Blockchain analytics company Chainalysis has announced falling victim to an AI-driven cyberattack that resulted in a data breach.

“This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools,” the company said.

The incident, it pointed out, is not related to the recent $6.36 billion Binance heist that was blamed on North Korean hackers.

According to Chainalysis, the attack did not result in the compromise of investigation content, transaction or query results, passwords in clear text, or other credentials and secrets.

“Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users,” Chainalysis said.

The company continues to investigate the full scope of the data breach and has not disclosed how many individuals were potentially affected. 

Advertisement. Scroll to continue reading.

“Our teams have been working around the clock to investigate unauthorized activity, patch vulnerabilities, and harden our systems,” it said.

Chainalysis noted that it has observed an industry-wide rise in AI-driven cyberattacks, as many other tech platforms have been hit in recent weeks.

The company has been working with external cybersecurity experts and LLMs to review its security posture and strengthen it against these evolving threats.

Because names and email addresses were compromised, it recommends that users watch for unexpected authentication prompts and password reset requests, and make sure they have MFA enabled.

Related: Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack

Related: Over 41,000 DHS Employee Records Leaked Online

Related: Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net

Related: HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

Related Content

Data Breaches

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.

Cybercrime

The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.

Cybercrime

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

Data Breaches

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

Data Breaches

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

Data Breaches

A leaked SquareML access key could have been used to access a database containing personal and health information.

Data Breaches

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Data Breaches

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version