Chainalysis breach exposes credentials for all users

Chainalysis disclosed the breach in stages, starting last Friday with an email to affected customers describing the theft of what it called non-sensitive data such as user IDs, full names, email addresses, and organization role labels. The company said the October incident was similar to hacks of other platforms during the same month and that the external actor used AI agent-assisted offensive techniques. In a Wednesday update, Chainalysis added that part of the ongoing multifront cyberattack involved an on-path attack—also known as an adversary-in-the-middle attack—that exposed a subset of customer passwords, and said the attack vector had been identified and fixed. The company has yet to say where the infrastructure compromise occurred or whether the data obtained from it was TLS encrypted, leaving open questions about the full scope of what attackers may have intercepted.