An unidentified attacker used agentic AI to target blockchain analysis firm Chainalysis to access non-sensitive customer data, such as user IDs and full names.
The company disclosed the hack on Oct. 30, in which the attackers gained unauthorized access to the company’s systems and internal tools.
“Based on the evidence available to date, we have found no indication that these incidents resulted in the unauthorized access of investigation content (such as graphs, notes, or cases), transaction or query results, passwords in clear text, MFA secrets, or user session tokens,” the company said.
The attackers did, however, gain access to non-sensitive customer data, such as user IDs, full names, and email addresses. The company did not identify any specific threat group but added that it is currently working with third-party cybersecurity experts to determine the full extent of the hack.
Chainalysis said it had proactively notified all of its customers. It added that it was seeing “an industry-wide rise in AI-driven cyberattacks” and was using large language models to support a broader review of its platform’s security.
“Chainalysis users should continue to be hyper-vigilant of unexpected password reset requests or authentication prompts,” the company added. “If your organization has not yet enabled two-factor authentication, we strongly recommend doing so. Your Chainalysis account manager can help you complete that process.”
Chainalysis did not immediately respond to a request for comment.
The disclosure from the company comes as hackers continue to target cryptocurrency exchanges. In one of the biggest cases of cryptocurrency theft, hackers linked to North Korea stole an estimated $6.3 billion in digital currency from cryptocurrency platform Binance on Oct. 29. Chainalysis said its incident was unrelated.
Nearly $3 billion of the stolen funds has since been frozen, and Binance said on Nov. 1 it had “covered approximately 95% of the impacted amount.”
