Chainalysis has told customers that an outside actor used “offensive agentic techniques” to break into its systems and internal tools this month.
The company, whose software is widely used to trace stolen crypto, published the notice in full on 30 October. It says the attacker reached user IDs, full names, email addresses and organisation role labels for people provisioned on its platform.
Chainalysis says it has found no indication that investigation content, transaction or query results, clear-text passwords, multi-factor secrets or session tokens were accessed. It has hired outside security experts and is using large language models in its own review.
Customers are told to switch on two-factor authentication and to watch for unexpected password reset requests. A list of names, emails and roles is the sort of material that makes a convincing phishing message aimed at an investigator.
The company says the incident is unrelated to the Binance theft, which it is also tracking. On its account the timing is coincidence, though it means the firm was dealing with both at once.
The notice does not say when the intrusion began, how many customers were affected or which weakness was used. The Block reports that Chainalysis declined to answer follow-up questions, and that the incident was first flagged by International Cyber Digest.
“Agentic” is the company’s word, not a finding anyone else has tested. Until it says what the agents actually did, the phrase describes how fast the attacker moved, and nothing a customer can verify.
