Blockchain analytics company Chainalysis has warned that information belonging to all its users was exposed after a cyberattack involving what it described as “offensive agentic techniques.”
Offensive agentic techniques used
In an update published recently, the company disclosed that an unidentified attacker had gained unauthorized access to its systems and internal tools, exposing customer information that included names, usernames, password hashes and active authentication tokens.
Chainalysis initially reported the security incident on October 30 but said at the time that it had found no evidence of unauthorized access to authentication credentials or session tokens.
Chainalysis has not identified the attacker or provided technical details about how the intrusion was carried out. The company previously said it detected an external actor using “offensive agentic techniques” to access its infrastructure.
Such techniques generally involve AI-powered systems capable of carrying out multiple tasks with limited human intervention, potentially helping attackers automate different stages of a cyber intrusion.
About the breach
The latest disclosure indicates that the impact of the breach was more extensive than initially understood. Chainalysis did not clarify whether every category of information was exposed for every user or disclose the total number of affected accounts.
The company serves more than 1,500 customers, including law enforcement agencies, financial institutions, cryptocurrency businesses, regulators and national security organizations.
Customer accouts also assessed
Chainanalysis also confirmed that some customer accounts associated with its Know Your Transaction (KYT) service appeared to have been accessed without authorization. The platform is used by organizations to monitor cryptocurrency transactions and identify suspicious financial activities.
In addition to the exposure of password hashes and authentication tokens, Chainalysis disclosed a separate security issue involving an on-path attack.
In this type of attack, a malicious actor intercepts communications between users and an online service, potentially capturing sensitive information.
The company said the interception method had been contained and remediated, while affected accounts were being locked. However, it remains unclear whether these incidents were connected to the original intrusion or involved the same attacker.
Impact on services
The breach has also impacted several Chainalysis services. The company temporarily took its KYT user interface and application programming interface (API), Address Screening products and login page offline after detecting abnormal activity. Its Reactor investigation platform and Data Solutions product had also been taken offline earlier as a precaution.
Read the original article:
Chainalysis Says Cyber Breach Exposed User Data and Authentication Tokens Due to Agentic Attack