Chainalysis disclosed on October 30 that an external actor gained unauthorized access to its systems and internal tools, exposing customer names, email addresses, user IDs and organization role labels.
The company said it is still determining which records were accessed for each affected organization and promised detailed breakdowns upon completion of its investigation. The disclosure did not provide a total number of affected records, identify the intruder or specify which vulnerabilities were exploited. Chainalysis stated the incident was unrelated to a recent crypto theft involving Binance.
What was not accessed
Based on available evidence, Chainalysis said it found no indication of unauthorized access to investigation content, including graphs, notes or cases; transaction or query results; clear-text passwords; multifactor authentication secrets; or user session tokens. The company noted this finding remains provisional while the investigation continues.
Recommended security steps
Chainalysis strongly recommended enabling two-factor authentication for organizations that have not already done so. The company urged users to remain alert to unexpected password resets and authentication prompts.
The company notified all customers and engaged third-party cybersecurity experts. Its response included investigating unauthorized activity, patching vulnerabilities and strengthening systems.
According to the Federal Trade Commission, users should contact companies through known phone numbers or websites when verifying suspicious messages, and multifactor authentication can help prevent account compromise if credentials are obtained.
