Chainalysis breached using “offensive agentic techniques”

Chainalysis disclosed that in October attackers using "offensive agentic techniques" accessed its systems and internal tools and obtained some customer records (user IDs, full names, emails, and organization role labels). The company reports no evidence that investigation content, transaction/query results, clear-text passwords, MFA secrets, or session tokens were accessed, has notified impacted customers, recommended two-factor authentication, and engaged third-party cybersecurity experts to investigate and remediate; the exposed contact and role data increases risk of targeted social-engineering against high-value customers such as exchanges and law enforcement.