Chainalysis Discloses Unauthorized Access to Internal Systems and Customer Data
Summary
Chainalysis says attackers accessed internal systems and customer names, email addresses, user IDs, and role labels. The company reports no evidence that investigation content or authentication credentials were accessed and is still investigating.
Key points
- Chainalysis disclosed that an external actor gained unauthorized access to its internal systems and tools earlier this month.
- The company says accessed customer information included names, email addresses, user IDs, and organizational role labels.
- Chainalysis has not shared which vulnerabilities or tools were involved or how long the attackers had access.
- The company reports no evidence so far that investigation content, authentication credentials, or session tokens were accessed.
- Chainalysis is working with external cybersecurity experts, patching vulnerabilities, and hardening its systems.
- Customers were advised to enable two-factor authentication and watch for unexpected authentication requests and impersonation scams.
Article Details
- Victim Organization
- Chainalysis
- Incident Type
- Unauthorized access to internal systems and tools resulting in access to some customer information
- Data Types Exposed
- User IDs
- Full names
- Email addresses
- Organizational role labels
- Affected Records
- Undetermined; Chainalysis is still determining which records were accessed for each organization.
- Operational Impact
- Chainalysis is patching vulnerabilities and hardening its systems while its investigation continues. No service disruption is described.
- Claim Status
- confirmed