Breaches and incidentsBriefChecked against a primary source
Chainalysis: intrusion into internal systems by “offensive agentic techniques”
Chainalysis says it detected “an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems” in October.
- Disclosed
What happened
- Chainalysis says it detected “an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems” in October. Accessed: user IDs, full names, email addresses and organization role labels of provisioned platform users. Chainalysis says it has no indication that investigation content, query results, clear-text passwords, MFA secrets or session tokens were accessed. Investigation ongoing.
- Initial access / techniques: not disclosed. Chainalysis says it is patching the exploited vulnerabilities.
- Attribution: none. Chainalysis says the incident is unrelated to the Binance theft. BleepingComputer notes it is unclear whether an existing framework such as ARTEX was used.
- Response: external IR firm engaged, customers being notified, users told to enable 2FA and to distrust “fund recovery” or recruiting approaches using the leaked contact data.
Sources
- https://www.chainalysis.com/blog/security-incident-october-30/
- https://www.bleepingcomputer.com/news/security/chainalysis-discloses-data-breach-from-offensive-agentic-techniques/
- https://www.privacyguides.org/news/2026/10/30/data-breach-roundup-oct-23-oct-29-2026/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.