Chainalysis breached by an attacker using AI agent tooling: names, emails, user IDs and roles of customer platform users exposed

Chainalysis, the blockchain analysis firm, confirmed on 30 Oct 2026 that an outside attacker using 'offensive agentic techniques' (AI-driven attack tooling) got into its systems and internal tools earlier in October 2026. The attacker accessed the user IDs, full names, email addresses and organisation role labels of users provisioned on the Chainalysis platform, including details of customer organisations. Chainalysis says investigation content, authentication credentials and session tokens were not accessed, and that it is patching vulnerabilities and hardening its systems. How the attacker got in, who it is and the exact dates are unknown. At risk: organisations that use Chainalysis products (exchanges, crypto firms, banks, law enforcement and compliance teams). Their staff can now be targeted by phishing that uses real names and roles, which matters given the recent attacks on crypto platforms.

Summary written from the sources below. Check the originals before acting.