2026 Chainalysis — external actor reached internal tools; customer names, emails and organisational roles exposed
Data compromised
Account identifiers, real names, email addresses and labels showing each user's organisational role, for users provisioned on the platform. The company says it found no evidence of access to investigation content, authentication credentials or session tokens. It is still determining which records were accessed for each organisation, and it has not stated the number of customers.
Technical writeup
Chainalysis attributes the intrusion to an external actor using "offensive agentic techniques." Coverage says it is unclear whether the actor used existing frameworks such as ARTEX or custom AI agents; the company has not said. Chainalysis says it is using large language models in its broader security review.
Root cause
The company says an external actor using "offensive agentic techniques" reached its internal systems and tools earlier in October 2026. It has not disclosed the exploited vulnerability, which tools were accessed, or how long the access lasted.