Blockchain analytics and tracking firm Chainalysis said an attack on its internal systems exposed some customers’ names, email addresses, and information about their roles within their organizations.
Chainalysis, which tracks cryptocurrency transactions, is now in the headlines after a cyberattack targeting its own systems. According to a company email reported by Wu Blockchain, an outside attacker gained unauthorized access to internal systems and tools and obtained some customer data.
The company said agent-based techniques were used in the attack. While teams work to identify which records were affected, they are also closing security gaps and strengthening protections across their systems.
Which customer information was affected?
The information affected by the breach includes user IDs, full names, email addresses, and labels indicating customers’ roles within their organizations. Chainalysis described this data in its email as “non-sensitive” customer data. The company is still investigating the scope of the affected records.
Initial findings on investigation files and account access data
Chainalysis said its investigation so far has found no evidence that investigation content, such as graphs, notes, and cases, was accessed. The same statement said there was also no indication that transaction or query results had been accessed.
The company also said there was no evidence that plaintext passwords, multifactor authentication secrets, or user session tokens had been compromised. This assessment is based on the investigation’s findings to date.
Chainalysis also specifically emphasized that the security incident was not connected to the recent crypto theft at Binance.
Not investment advice.