Monday 2 November
Global

Your region, kept on this device.

Chainalysis

Company

Facts

Country
United StatesSource: Wikidata
Founded
2014Source: Wikidata
Official website
www.chainalysis.comSource: Wikidata

Threat actors named alongside

Source: RedTeamDaily stories that mention both

Security timeline

  1. Named in breach reports by GBHackersChainalysis confirms cyberattack giving an external actor access to internal tools
  2. Named in breach reports by Cointelegraph (Hacks)Chainalysis hit by cybersecurity incident exposing some customer data
  3. Named in breach reports by Security AffairsChainalysis discloses breach exposing customer names, emails and user IDs
  4. Named in breach reports by BleepingComputerChainalysis discloses data breach involving customer contact details
  5. Named in breach reports by Cyber Security NewsChainalysis confirms attacker used agentic techniques to expose customer account details
  6. Named in breach reports by Chainalysis BlogChainalysis discloses a cybersecurity incident affecting its platform
  7. Named in breach reports by Help Net SecurityBinance reports record $6.3 billion crypto theft, possibly via compromised DevOps engineer laptop

Recent news

Security Affairs·

Chainalysis discloses breach exposing customer names, emails and user IDs

Blockchain analytics firm says an external actor, which it describes as using offensive agentic techniques, accessed its systems and internal tools and stole non-sensitive customer data. The exposed data includes user IDs, full names, email addresses and organisation role labels, while the company reports no evidence of access to investigation content, transaction results, clear-text passwords, MFA secrets or session tokens. Chainalysis is patching, has brought in outside experts, and is recommending 2FA and vigilance against password reset or login approval prompts.

Cyber Security News· · High

Chainalysis confirms attacker used agentic techniques to expose customer account details

confirmed an attacker used "offensive agentic techniques" to access its systems and internal tools, exposing user IDs, full names, work email addresses and organisation role labels. It detected the intrusion in October, says investigation graphs, notes, cases, query results, clear-text passwords, MFA secrets and session tokens show no sign of access, and has not disclosed the entry point, vulnerabilities, attacker or total number of affected users.

Help Net Security· · Critical

Binance reports record $6.3 billion crypto theft, possibly via compromised DevOps engineer laptop

said an initial investigation points to a compromised DevOps engineer's laptop that gave an attacker access to a service container, from which unauthorised withdrawals were submitted. The company found no evidence of a wallet private key leak, and co-CEO Richard Teng said the attack was more complex than one engineer's permissions. TRM Labs and link the theft to TraderTraitor, while Elliptic says about $3.3 billion was moved into assets that cannot be frozen.