Blockchain-analytics firm Chainalysis disclosed that an external actor gained unauthorised access to its systems and internal tools using "offensive agentic techniques" — wording that indicates an AI-powered tool drove the intrusion. The company said only non-sensitive customer data was confirmed accessed, including user IDs, full names, email addresses and organisation role labels for users provisioned on its platform; it stated the breach did not expose investigation content, authentication credentials or session tokens. Chainalysis said it is patching vulnerabilities and hardening its systems in response. The disclosure follows the same-shaped agentic attacks the firm reports on, and lands days after the Polymarket and DebugBear third-party script incidents in the crypto sector; it is the second time this period that a firm whose business is threat visibility has itself had to disclose an intrusion.

• Source article