Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
American blockchain analysis firm Chainalysis has confirmed a cybersecurity incident where an external actor accessed non-sensitive customer data, though investigation content and authentication credentials remained secure.
The company detected an external actor using "offensive agentic techniques" to gain unauthorized access to its systems and internal tools. While customer data was exposed, Chainalysis emphasized that no investigation content, authentication credentials, or session tokens were compromised.
Exposed customer information
The breach included non-sensitive customer data such as user IDs, full names, email addresses, and organization role labels for users provisioned on the Chainalysis platform. The company has begun patching vulnerabilities and hardening its systems in response to the incident.
This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools.
AI-powered attacks on rise
The incident highlights an industry-wide trend of AI-driven cyber attacks. Chainalysis noted that adversarial use of AI has increased recently, with threat actors using the technology to automate different stages of attack lifecycles.
A China-backed group known as Vapor Panda has been using ARTEX, an agentic penetration testing framework, to conduct large-scale attacks, compromising about 140 targets in 11 days. "AI mainly improves established attacks by making them faster, more personalized, and easier to scale," according to Abnormal AI.
Related
