Zero Radar
← feed
HighData breachupdated 31 Oct 2026, 12:51 UTC

Chainalysis customer contact data exposed in breach

A blockchain analysis firm had an intruder get into some internal tools. The intruder could see basic customer contact details, such as names and email addresses.

Attacks reported (The Hacker News, BleepingComputer)2 independent sources
SeverityHighData breach
Being exploited?ReportedBy The Hacker News, BleepingComputer, not officially confirmed yet
What to doCheck exposureTreat unsolicited messages referencing Chainalysis with suspicion and verify them through official channels before responding.
How sure is this?2 independent sourcesSeveral independent publishers agree

How the attack works simplified

  1. 1External actorUsed offensive agentic techniques against Chainalysis
  2. 2Internal tools accessedIntruder reached internal systems and tools
  3. 3Customer identity dataNames, emails, user IDs, and roles exposed
  4. 4Customers at riskExposed contact details may enable phishing
  5. ResultCustomer contact details exposed to attacker

What happened

Chainalysis disclosed that an external actor used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. The company says investigation content, authentication credentials, and session tokens were not accessed.

Why it is dangerous: Customers whose names, emails, and roles were exposed may receive phishing or social-engineering attempts that look like they come from Chainalysis. Organizations using Chainalysis accounts have their staff contact details exposed.

Are you affected?

You are affected if you are a Chainalysis customer or user whose name, email address, user ID, or organizational role was stored in the affected internal systems.

Chainalysis customer data: names, email addresses, user IDs, organizational roles (customer-facing product versions unknown).

What to do

  1. Be cautious of unexpected emails, calls, or messages claiming to be from Chainalysis, and verify through official channels before acting.
  2. Check the official Chainalysis disclosure for guidance on whether your data was involved.
  3. Use unique passwords and enable multi-factor authentication on accounts that share the exposed email address.

Timeline

  1. 31 Oct 2026, 12:01 UTC
    Publicly disclosed
  2. 31 Oct 2026, 12:01 UTC
    Reported by The Hacker News · The Hacker News
  3. 31 Oct 2026, 12:19 UTC
    Picked up by Zero Radar
  4. 31 Oct 2026, 12:51 UTC
    BleepingComputer reported on it · BleepingComputer

Sources 2 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-1f2870fb
Disclosed
31 Oct 2026, 12:01 UTC
On Zero Radar
31 Oct 2026, 12:19 UTC (18 min after disclosure)
Last change
31 Oct 2026, 12:51 UTC

The plain-language parts and the attack diagram were written by an AI model (claude-haiku-5-5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Chainalysis customer contact data exposed in breach · Zero Radar