Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Summary: Chainalysis reported that an external actor used offensive agentic techniques to gain unauthorized access to its systems and internal tools, exposing non-sensitive customer data including user IDs, full names, email addresses, and organization role labels. The company said the breach did not reach its investigation content, authentication credentials, or session tokens, and that it is patching vulnerabilities and hardening its systems.
What you should know: The attacker reached internal tools at a firm whose product is blockchain investigation, and the source ties the method to a broader pattern: the China state-backed group Vapor Panda used an agentic penetration testing framework called ARTEX to compromise about 140 targets in 11 days.
Read the original at The Hacker News ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026