The Firm That Traces Stolen Crypto Says Its Own Systems Were Breached

Chainalysis, a blockchain analysis company that sells crypto-tracing software to exchanges, financial institutions and law-enforcement agencies, says an external actor reached its systems and internal tools. In a security notice dated Oct. 30, 2026, the company said it had detected the intrusion and that the actor used what it called "offensive agentic techniques," a term for AI tools that act on their own. The notice says names, email addresses, user IDs and role labels for users set up on the platform were accessed.
The notice is signed by the Chainalysis Team and carries the full text of an email sent to affected customers. It calls those fields "non-sensitive customer data" and says Chainalysis has found no indication that the investigation files its customers build were reached. The company says it has notified all of its customers and is still working out which records belong to each organization, with a detailed breakdown to follow.
On the evidence available so far, the company says it has found no indication that the intruder reached transaction or query results, passwords in clear text, the secrets behind two-factor logins, or the tokens that keep a user signed in.
Chainalysis has published no technical account of what the actor's tooling did, and it names no vulnerability. The notice says that its teams worked to patch vulnerabilities and that the review now under way goes beyond the ones that were exploited. The company also says it is seeing "an industry-wide rise in AI-driven cyberattacks," an assessment it offers without figures.
The company says it has brought in outside cybersecurity experts and is using large language models to support a wider review of the platform's security. Its advice to users is to watch for unexpected password reset requests or authentication prompts, and to turn on two-factor authentication where it is not already enabled.
The notice says the incident is not related to the recent crypto theft at Binance.
