According to The Hacker News, Chainalysis, an American blockchain analysis firm, confirmed that it experienced a cybersecurity incident in which an external actor accessed non-sensitive customer data. The company stated the intrusion involved access to internal tools but did not result in unauthorized access to investigation content, authentication credentials, or session tokens.
Chainalysis detected the incident this month when it identified an external actor using offensive agentic capabilities. No evidence was provided that sensitive operational systems—such as those containing proprietary investigation data—were compromised. The firm emphasized that customer identity data classified as non-sensitive was accessed, while authentication mechanisms and session tokens remained unaffected.
The company did not specify the timeframe beyond stating the detection occurred “this month.” It reiterated that no unauthorized access to core investigative tools or credential stores occurred as a result of the incident. Chainalysis’ statement focused on clarifying what was and was not accessed, without detailing response actions, affected customer counts, or attribution beyond referencing the external actor’s use of offensive capabilities.
