Chainalysis disclosed that attackers used "offensive agentic techniques" to gain unauthorized access to its internal systems and tools earlier this month. The breach exposed user IDs, full names, email addresses and organizational role labels for users provisioned on the platform, but the company says there is no evidence that sensitive investigation data, authentication credentials or session tokens were accessed. Chainalysis detected the intrusion around 5:14 PM ET on Friday and has been patching vulnerabilities and hardening its systems while working with external cybersecurity experts and using large language models for a broader security review. The firm warned customers to enable two-factor authentication and watch for unexpected password reset requests, authentication prompts and scammers impersonating Chainalysis, especially those offering fund recovery or recruiting services. 1