Blockchain analytics firm Chainalysis published the email it sent to affected customers. It says it detected an external actor this month using "offensive agentic techniques" to get unauthorized access to Chainalysis systems and internal tools. Its teams have been investigating, patching the exploited vulnerabilities and hardening systems.

• Accessed: "non-sensitive" customer data for users provisioned on the platform: user IDs, full names, email addresses and organization role labels. Chainalysis is still working out which records were accessed for each customer organization.
• Not seen accessed (so far): investigation content (graphs, notes, cases), transaction or query results, cleartext passwords, MFA secrets or user session tokens.
• Not related to Binance: Chainalysis says the incident is unrelated to the Binance theft it is helping trace.
• Not disclosed: which vulnerabilities were exploited, when exactly the intrusion began, and what the "agentic" techniques involved. Chainalysis has engaged outside responders and says it is using LLMs in a broader platform security review.

Do now (Chainalysis users): expect targeted phishing that uses your name, role and organization; be wary of unexpected password-reset or authentication prompts, and turn on two-factor authentication if your organization has not.