Chainalysis, which sells tools for tracing cryptocurrency, said an outside attacker got into its systems and internal tools this month. The company said the attacker used "offensive agentic techniques." It said the attacker viewed user IDs, full names, email addresses and role labels of people with accounts on its platform. BleepingComputer reported that the company posted its customer email on Friday.
So far, Chainalysis says, its review has not shown that anyone opened graphs, notes or cases. The same goes for query results, plain-text passwords, MFA secrets and session tokens. It is still working out which records belong to each customer and will share a breakdown later. BleepingComputer notes that agentic tools run multi-step tasks with little human help, so an attacker can automate parts of a break-in, such as finding flaws, exploiting them and chaining later steps. Chainalysis has named no flaw, tool or timeline, so how this attack worked is unknown.
BleepingComputer says law enforcement, government agencies, exchanges and banks use Chainalysis. For such a vendor, a list of staff names, emails and roles is a ready target list for fake messages, even if no case data was touched. Customers can ask which of their records were accessed, when the breakdown will arrive, and whether two-factor login is on for every user.