Chainalysis, the blockchain analytics firm used by police, exchanges and banks, has disclosed that an outside actor gained access to its internal systems and tools using what it calls offensive agentic techniques. Names, email addresses, user IDs and organisational role labels of platform users were exposed, BleepingComputer reports. The company says it found no sign of access to investigation content, credentials or session tokens and that the incident is unrelated to the Binance theft. It advises customers to turn on two-factor authentication and watch for messages impersonating it.

What it means: The incident matters on two levels. First, Chainalysis helps others track down criminals, so the names and roles of its users reveal which investigators, compliance analysts and police officers work on crypto cases. A list like that is valuable for targeted phishing and for so-called fund recovery scams aimed at theft victims. Second, the mention of AI agents as an attack tool confirms a trend seen throughout October: attackers are automating the search for weaknesses and the movement inside a network, with less human effort. The company has not shared technical details, so it is not clear whether a known framework or a custom system was used. For Greek banks, payment institutions and crypto-asset providers that rely on platforms like this, the practical steps are to enforce a second factor on every account, warn staff that convincing messages may arrive in the supplier's name, and record in the third-party register that a critical supplier has had an incident. DORA requires exactly this kind of oversight of ICT providers.

Read the original on BleepingComputer

Related service: Custom software

Related stories