Chainalysis discloses breach exposing customer names, emails and user IDs
BREACHBinanceredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Blockchain analytics firm Chainalysis says an external actor, which it describes as using offensive agentic techniques, accessed its systems and internal tools and stole non-sensitive customer data. The exposed data includes user IDs, full names, email addresses and organisation role labels, while the company reports no evidence of access to investigation content, transaction results, clear-text passwords, MFA secrets or session tokens. Chainalysis is patching, has brought in outside experts, and is recommending 2FA and vigilance against password reset or login approval prompts.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Enable two-factor authentication for all accounts in your organisation if it is not already active.
- Be wary of unexpected password reset requests or login approval prompts, and verify them before approving.
- Watch for phishing emails that use your name or email address, since these details were exposed.
- Wait for Chainalysis's detailed breakdown to confirm whether records for your organisation were accessed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Security Affairs
Who and what is in it
Companies