Key Facts

• Chainalysis said its investigation found that names, usernames, password hashes, and live tokens for all platform users were exposed to a malicious actor.
• The company said an on-path attack exposed a subset of customer passwords and that it identified and fixed the attack vector.
• Chainalysis said an external actor used AI-agent-assisted techniques to gain unauthorized access to its systems and internal tools.
• The company took down its login page and Know Your Transaction service, and removed access to Reactor and Data Solutions.
• Chainalysis began restoring customer access to Know Your Transaction and Address Screening services.
• The company asked customers to provide trusted IP addresses and said they must reset credentials when access returns.
• Chainalysis said it has found no evidence that investigation data was accessed or its attribution data was manipulated.
• The article says Chainalysis has not identified where the on-path attack infrastructure was compromised or explained how the attackers could decrypt monitored traffic.