Intruders access Chainalysis customer names and email addresses
Blockchain analytics company Chainalysis says an intruder accessed customer names, email addresses, user identifiers and organization roles through its internal systems. The company has notified customers and is investigating with outside specialists. It says it has found no evidence so far that investigation content, passwords or session tokens were accessed.
Economics & Markets··Night
Customer contact information was accessed
Chainalysis, a company whose blockchain analysis tools help investigators trace cryptocurrency transactions, disclosed unauthorized access to internal systems on 30 October. Customer information accessed included full names, email addresses, user identifiers and organization role labels. A company spokesperson confirmed the incident to BleepingComputer. Chainalysis said it had proactively notified customers and was investigating the activity with outside cybersecurity specialists.[1], [2]
Company reports no evidence of access to case content
The company said its investigation had so far found no indication that intruders accessed investigation graphs, notes or cases. It reported the same finding for transaction and query results, readable passwords, multi-factor authentication secrets and session tokens. These statements describe the evidence available during an ongoing investigation. Chainalysis was still determining the information accessed for each customer organization and promised a detailed breakdown when that work was complete.[1]
Security review extends across the platform
Chainalysis said it was closing vulnerabilities and strengthening its systems, while using large language models to support a wider security review. It urged users to watch for unexpected password-reset and authentication requests, and asked organizations without two-factor authentication to enable it. The company said the incident was unrelated to the recent theft of cryptocurrency at Binance.[1]
