Chainalysis Breach: AI Agents Used to Access Customer Names and Emails
Chainalysis, the blockchain analytics firm that police departments, banks and crypto exchanges use to trace stolen digital money, disclosed on October 30, 2026 that its own systems had been breached. An outside attacker, the company said, used “offensive agentic techniques” to get into its systems and internal tools earlier in October and pull out customer identity data. The Chainalysis breach exposed four fields: user IDs, full names, email addresses and organization role labels. Chainalysis called that data non-sensitive, a label that will do little to calm the people on the list. A name, a work email and a job title tell an attacker exactly who handles investigations or compliance at a given company, and where to aim a phishing email. ...