Chainalysis, the US blockchain analytics company used by law enforcement, banks and crypto exchanges to trace money laundering and crime, says it has been breached. According to the company, an external actor used 'offensive agentic techniques', autonomous AI tools, to get into its internal systems and tools.
Chainalysis first disclosed the breach on October 30 and now says information on all of its users may have been exposed. According to reports, the accessed data includes user IDs, full names, email addresses and organization role labels for users provisioned on the platform. The company is still determining which records were accessed for each organization and is working with outside specialists.
The bigger worry is not only technical. Chainalysis users include investigators at law enforcement and financial institutions who track crypto criminals. Such a list could fuel targeted phishing, and possibly put investigators at risk. The company advises users to watch for unexpected password reset or authentication requests.
It is one of the most prominent cases so far of a company publicly saying attackers used AI agents. It adds to warnings from security firms this year that autonomous tools shorten the time from intrusion to data theft.
