{"schema_version":"0.10.0","id":"LR-2026-0297","record_version":2,"title":"Chainalysis internal systems breached by attacker using \"agentic offensive techniques\"","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":62.2,"score_breakdown":{"source_authority":12.1,"independent_corroboration":20.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":8.0,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-31","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: The Hacker News · subject to change","original_document":null,"reports_total":9,"reports_independent":1,"reports_derivative":2,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-10-31","history":[{"date":"2026-10-31","from_level":null,"to_level":"preliminary","reason":"1 report: The Hacker News · subject to change"}]},"sources_hash":"c3126ee75e2dc395e2c02592bd874de6936c6bd42fad61193c0c938caa9ab2ee"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":"internal systems and work tools","autonomy_level":"unknown","guardrails_present":[],"deployment_context":"production","tier":null,"lifecycle_stage":"production","integration_type":"agentic_with_tools","intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-10-01","date_occurred_precision":"month","date_disclosed":"2026-10-31","incident_class":"security_compromise","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Chainalysis confirmed on October 30, 2026 that an external actor breached its internal systems and client data using offensive agentic techniques.","tags":["crypto","agentic-attack","customer-data","attribution-dprk","data-breach","phishing-risk","crypto-intelligence","agentic-attack-tooling","customer-data-access","blockchain-analytics"],"date_detected":null,"near_miss":false,"root_cause":"unknown","root_cause_detail":null,"failure_class_detail":null,"responsible_party":"unknown","adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Patching vulnerabilities and hardening systems.","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"major, because a live production compromise: An external attacker gained unauthorized access to Chainalysis's live production systems and internal tools and accessed customer data, with the number of affected users and organizations not stated.","harm_class":["privacy","operational","third_party_security"],"affected_description":"certain data associated with users of its platform; full names, email addresses, user IDs, and job titles within client organizations","protected_class_involved":null,"data_categories_exposed":["pii"],"loss_range_usd":null,"reversibility":"irreversible","downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.cointribune.com/en/crypto-an-ai-assisted-cyberattack-hits-chainalysis/","publisher":"Cointribune","date":"2026-10-31","type":"press","title":"Crypto: An AI-assisted Cyberattack hits Chainalysis","archived_url":null,"attachment":"first_report"},{"url":"https://tech.yahoo.com/cybersecurity/articles/chainalysis-firm-hunts-crypto-hackers-122556835.html","publisher":"Yahoo Tech","date":"2026-10-31","type":"press","title":"Chainalysis, the Firm That Hunts Crypto Hackers, Got Hacked With AI Agents","archived_url":null,"attachment":"fingerprint","independence":"derivative"},{"url":"https://financefeeds.com/chainalysis-hack-customer-data-breach-agentic-ai/","publisher":"FinanceFeeds","date":"2026-10-31","type":"press","title":"Chainalysis Hack: AI-Driven Attack Exposes Customer Data","archived_url":null,"attachment":"fingerprint"},{"url":"https://coinpedia.org/news/chainalysis-says-attacker-used-agentic-ai-techniques-to-access-internal-systems/","publisher":"coinpedia.org","date":"2026-10-31","type":"press","title":"Chainalysis Says Attacker Used Agentic AI Techniques to Access Internal Systems","archived_url":null,"attachment":"fingerprint"},{"url":"https://finance.biggo.com/news/872c5a33-44d9-48e5-a9e8-df6827df1e93","publisher":"BigGo Finance","date":"2026-10-31","type":"press","title":"Chainalysis Says AI Agent Attack Leaked Customer Data, Unrelated to Binance Incident — BigGo Finance","archived_url":null,"attachment":"fingerprint","independence":"derivative"},{"url":"https://coingape.com/crypto-hack-tracker-chainalysis-confirms-it-was-hit-by-agentic-ai-driven-cyberattack/","publisher":"CoinGape","date":"2026-10-31","type":"press","title":"Crypto Hack Tracker Chainalysis Confirms It Was Hit by Agentic AI-Driven Cyberattack","archived_url":null,"attachment":"fingerprint"},{"url":"https://www.coingabbar.com/en/chainalysis-security-breach-agentic-attack-customer-data","publisher":"Coin Gabbar","date":"2026-10-31","type":"press","title":"Chainalysis Security Breach: Agentic Attack Exposes User Data","archived_url":null,"attachment":"fingerprint"},{"url":"https://thehackernews.com/2026/10/chainalysis-confirms-intrusion-into.html","publisher":"The Hacker News","date":"2026-10-31","type":"press","title":"Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data","archived_url":null,"attachment":"fingerprint","independence":"independent"},{"url":"https://newscord.org/article/chainalysis-discloses-agentic-ai-cyberattack-exposing-customer-names-and-emails--Story_20261031_Blockchaininvestigat37bdafad","publisher":"NewsCord","date":"2026-10-31","type":"press","title":"Chainalysis Discloses Agentic AI Cyberattack Exposing Customer Names and Emails: 12 outlets compared | NewsCord","archived_url":null,"attachment":"fingerprint"}],"per_field_confidence":{"system.permissions_scope":"C","system.lifecycle_stage":"D","system.integration_type":"C","system.developer":"D","system.autonomy_level":"D","system.deployment_context":"D","event.date_occurred":"C","event.tags":"B","event.near_miss":"C","event.root_cause":"C","event.responsible_party":"C","event.adversarial_actor":"C","event.remediation":"C","event.agent_involved":"C","event.trigger":"D","event.detection_method":"D","event.summary":"C","event.incident_class":"D","event.date_disclosed":"A","impact.harm_class":"D","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.reversibility":"D","impact.severity":"D","context.industry":"C","context.systemic_exposure":"C","context.denominator_available":"D","context.country":"C","impact.severity_because":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"The company has not revealed the AI model involved, the software used, or the exploited vulnerabilities."}],"system.autonomy_level":[{"source_index":0,"quote":"In Chainalysis’s case, no public technical demonstration yet determines the degree of autonomy of the tool used."}],"system.permissions_scope":[{"source_index":4,"quote":"The company said on October 31 that an external attacker used artificial intelligence (AI) agents to gain unauthorized access to its internal systems and work tools."}],"system.deployment_context":[{"source_index":4,"quote":"The company said on October 31 that an external attacker used artificial intelligence (AI) agents to gain unauthorized access to its internal systems and work tools."}],"system.lifecycle_stage":[{"source_index":5,"quote":"Blockchain analytics firm Chainalysis on Friday confirmed it suffered a cyberattack in which hackers used agentic AI to gain unauthorized access to its systems and internal tools."}],"system.integration_type":[{"source_index":0,"quote":"The company states the hacker used “agentic offensive techniques,” a term referring to attack methods based on systems capable of automating multiple operations."}],"event.date_occurred":[{"source_index":8,"quote":"Chainalysis said it detected the external attacker during October and continued investigating, patching vulnerabilities, and strengthening security across its platform."}],"event.trigger":[{"source_index":2,"quote":"Chainalysis has not disclosed the attacker’s identity, how they got in, the full timeline or the final root cause."}],"event.detection_method":[{"source_index":0,"quote":"The intrusion was detected during October."}],"event.summary":[{"source_index":0,"quote":"The company confirmed on October 30, 2026, that a hacker had accessed its internal systems and certain client data."}],"event.tags":[{"source_index":1,"quote":"The firm told customers an outside attacker used \"offensive agentic techniques\" to reach its systems."},{"source_index":3,"quote":"Chainalysis confirmed that an external attacker used “offensive agentic techniques” to access its internal systems and tools."},{"source_index":7,"quote":"The mention of \"offensive agentic techniques\" indicates that an artificial intelligence (AI)-powered tool was used to execute the attack, although Chainalysis offered no details on the specific methods or tactics employed."}],"event.near_miss":[{"source_index":4,"quote":"Global blockchain analytics firm Chainalysis suffered a breach in which an outside hacker accessed and leaked some customer information."}],"event.root_cause":[{"source_index":2,"quote":"Chainalysis has not disclosed the attacker’s identity, how they got in, the full timeline or the final root cause."}],"event.responsible_party":[{"source_index":2,"quote":"Chainalysis has not said who was behind the attack on its systems."}],"event.adversarial_actor":[{"source_index":0,"quote":"An external actor succeeded in penetrating its systems and some internal tools."}],"event.remediation":[{"source_index":7,"quote":"The company said it's patching vulnerabilities and hardening its systems in response to the incident."}],"event.incident_class":[{"source_index":0,"quote":"An external actor succeeded in penetrating its systems and some internal tools."}],"event.agent_involved":[{"source_index":0,"quote":"The company states the hacker used “agentic offensive techniques,” a term referring to attack methods based on systems capable of automating multiple operations."}],"impact.harm_class":[{"source_index":0,"quote":"This includes full names, email addresses, user IDs, and job titles within client organizations."},{"source_index":2,"quote":"A list of names, work emails and job roles at those clients could help attackers write convincing phishing messages aimed at investigators and compliance staff."}],"impact.affected_description":[{"source_index":0,"quote":"Chainalysis confirms that certain data associated with users of its platform were viewed without authorization."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"This includes full names, email addresses, user IDs, and job titles within client organizations."}],"impact.reversibility":[{"source_index":0,"quote":"This includes full names, email addresses, user IDs, and job titles within client organizations."}],"impact.severity_because":[{"source_index":2,"quote":"In a notice published on 30 October, Chainalysis said the attacker accessed some customer data, including user IDs, full names, email addresses and organization role labels."}],"context.industry":[{"source_index":0,"quote":"Chainalysis provides analysis tools to exchanges, financial institutions, and authorities tasked with recovering stolen funds or combating money laundering."}],"context.country":[{"source_index":0,"quote":"The American company Chainalysis published an unusual security notice on Friday, October 30."}],"context.systemic_exposure":[{"source_index":0,"quote":"The company has not revealed the AI model involved, the software used, or the exploited vulnerabilities."}],"impact.severity":[{"source_index":2,"quote":"In a notice published on 30 October, Chainalysis said the attacker accessed some customer data, including user IDs, full names, email addresses and organization role labels."}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-31"}]},"notes_on_gaps":"No source names the AI model, harness, developer, exploited vulnerability, attacker identity or root cause; trigger and detection_method are therefore unknown. No source states a count of affected users or organizations, a dollar loss, remediation hours, or a containment timeline, so those fields are omitted. The AI agents were the attacker's tooling, not a Chainalysis system, so failure_class is null (no agent-mechanism taxonomy applies to the victim's own agent) and system fields describe the attacker's tooling only where stated. Severity: sources split between moderate (bounded customer data) and major (live production compromise, many third-party client organizations); major is written because the breach was a live production compromise of internal systems and tools, with scope unbounded as to user count. Source 7's agent_involved=false conflicts with all others and is outweighed. Date disclosed: majority state 2026-10-30; some say 2026-10-31. Country: two sources call Chainalysis American; others silent. Reversibility 'irreversible' is a grade-D inference from personal data having been viewed. No source states a safeguard that existed and failed, so control_failure is empty and root_cause is unknown rather than guardrail. event.date_occurred: the source states the month only. system.tier: not set; no operator named and deployment_context is not a lab's. Sources disagree on context.country: [0] \"US\", [1] \"unknown\", [2] \"unknown\", [3] \"unknown\", [4] \"unknown\", [5] \"unknown\", [6] \"unknown\", [7] \"US\", [8] \"unknown\"; context.industry: [0] \"blockchain analysis / financial technology\", [3] \"Blockchain intelligence and analytics\", [4] \"blockchain analytics\", [6] \"Financial institutions / crypto analytics\"; event.agent_involved: [0] \"true\", [1] \"true\", [2] \"true\", [3] \"true\", [4] \"true\", [5] \"true\", [6] \"true\", [7] \"false\", [8] \"true\"; event.date_disclosed: [0] \"2026-10-30\", [1] \"2026-10-30\", [2] \"2026-10-30\", [3] \"2026-10-31\", [4] \"2026-10-31\", [5] \"2026-10-30\", [6] \"2026-10-30\", [7] \"2026-10-30\", [8] \"2026-10-31\"; event.responsible_party: [0] \"unknown\", [2] \"unknown\", [4] \"unknown\", [7] \"third_party\"; event.summary: [0] \"Chainalysis confirmed on October 30, 2026 that an external actor breached its internal systems and viewed client names, email addresses, user IDs and job titles. The company said the hacker used \\\"agentic offensive techniques\\\" but disclosed no model, tool or exploited vulnerability, and said it found no evidence of access to investigation records or credentials.\", [3] \"Chainalysis confirmed an external attacker used offensive agentic techniques to access its internal systems and tools, exposing customer user IDs, full names, email addresses and organizational roles. The company found no evidence investigation graphs, notes, cases, transaction results, query records, passwords, MFA secrets or session tokens were accessed, and did not disclose the vulnerabilities used. It warned users about phishing and recommended two-factor authentication, and engaged external cybersecurity specialists to investigate, patch exploited vulnerabilities and review its security infrastructure.\", [4] \"An external attacker used AI agents to gain unauthorized access to Chainalysis's internal systems and work tools, leaking customer user IDs, names, emails and role information. Chainalysis detected the intrusion in early October, engaged outside security experts, notified all customers, and said the incident is unrelated to the Binance theft.\", [5] \"Chainalysis confirmed a cyberattack in which hackers used agentic AI to gain unauthorized access to its systems and internal tools, exposing customer names, email addresses, user IDs and organizational roles. It said investigation found no access to investigation content, credentials or session tokens, and that it notified customers and is hardening systems. It did not name the attackers or the techniques, and said the incident is unrelated to the $6.3 billion Binance hack.\", [7] \"Chainalysis reported that an external actor used \\\"offensive agentic techniques\\\" to gain unauthorized access to its systems and internal tools, accessing non-sensitive customer data such as user IDs, full names, email addresses and organization role labels. The company said investigation content, authentication credentials and session tokens were not accessed, and that it is patching vulnerabilities and hardening its systems.\"; impact.affected_description: [0] \"certain data associated with users of its platform; full names, email addresses, user IDs, and job titles within client organizations\", [2] \"users provisioned on Chainalysis's platform, including government agencies, financial institutions and crypto exchanges\", [3] \"customers of Chainalysis whose user IDs, full names, email addresses and organizational roles were exposed\", [4] \"user IDs, names, email addresses and role information within client organizations\", [5] \"Chainalysis customers; exposed names, email addresses, user IDs and organizational roles\", [6] \"users on its platform; user IDs, full names, email addresses, and organization role labels\", [7] \"\\\"users provisioned on our platform\\\" and their organizations; non-sensitive customer data such as user IDs, full names, email addresses and organization role labels\", [8] \"users provisioned on its platform; platform user IDs, full names, email addresses, and organizational role labels\"; impact.severity: [0] \"moderate\", [1] \"major\", [2] \"major\", [3] \"moderate\", [4] \"major\", [5] \"major\", [6] \"moderate\", [7] \"moderate\", [8] \"moderate\". [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-31] system.lifecycle_stage: production. system.developer: no source names the developer. system.autonomy_level: no source states the arrangement. system.deployment_context: production. event.trigger: no source states a cause. event.detection_method: no source says who first noticed. event.incident_class: a source states an attacker, an injected instruction or a misused credential caused the system to act, or that the system's own boundary (sandbox, permissions, weights, accounts) was breached. impact.harm_class: privacy. impact.reversibility: irreversible. context.denominator_available: no denominator is available for this incident."},"context":{"industry":"blockchain analysis / financial technology","org_size_band":null,"country":"US","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":false,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Chainalysis, a blockchain analytics firm serving banks, exchanges and government agencies, had its internal systems and tools reached by an outside attacker using \"offensive agentic techniques\". The sources do not say what model, tools or permissions the attacker's agents held.","quote":"The firm told customers an outside attacker used \"offensive agentic techniques\" to reach its systems.","source_index":1,"grade":"D"},{"step":"went_wrong","text":"The attacker gained unauthorized access to Chainalysis's internal systems and tools and viewed customer data without authorization, breaching the boundary around its platform.","quote":"Chainalysis confirms that certain data associated with users of its platform were viewed without authorization.","source_index":0,"grade":"C"},{"step":"reached","text":"User IDs, full names, email addresses and organization role labels of users provisioned on the platform were accessed. Chainalysis found no evidence that investigation content, credentials or session tokens were accessed, and has not said how many users or organizations were affected.","quote":"\"Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users.\"","source_index":7,"grade":"C"},{"step":"caught","text":"Chainalysis says it detected the external attacker during October, but no source says who first noticed or by what signal.","quote":"Chainalysis said it detected the external attacker during October and continued investigating, patching vulnerabilities, and strengthening security across its platform.","source_index":8,"grade":"D"},{"step":"done","text":"Chainalysis notified all customers, engaged external cybersecurity experts, and said it is patching vulnerabilities and hardening its systems; it urged two-factor authentication and warned of phishing.","quote":"Chainalysis said it had notified customers and engaged external cybersecurity experts to investigate the unauthorized activity.","source_index":8,"grade":"C"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-31","source_urls":["https://www.cointribune.com/en/crypto-an-ai-assisted-cyberattack-hits-chainalysis/","https://tech.yahoo.com/cybersecurity/articles/chainalysis-firm-hunts-crypto-hackers-122556835.html","https://financefeeds.com/chainalysis-hack-customer-data-breach-agentic-ai/","https://coinpedia.org/news/chainalysis-says-attacker-used-agentic-ai-techniques-to-access-internal-systems/","https://finance.biggo.com/news/872c5a33-44d9-48e5-a9e8-df6827df1e93","https://coingape.com/crypto-hack-tracker-chainalysis-confirms-it-was-hit-by-agentic-ai-driven-cyberattack/","https://www.coingabbar.com/en/chainalysis-security-breach-agentic-attack-customer-data","https://thehackernews.com/2026/10/chainalysis-confirms-intrusion-into.html","https://newscord.org/article/chainalysis-discloses-agentic-ai-cyberattack-exposing-customer-names-and-emails--Story_20261031_Blockchaininvestigat37bdafad"]}}