Chainalysis says cybersecurity incident exposed some customer data

Chainalysis said it detected a cybersecurity incident affecting its systems and internal tools, and said its investigation to date found no evidence of unauthorized access to investigation content, authentication credentials or session tokens. In a statement published Oct. 30, 2026, the company said some non-sensitive customer data, including user IDs, full names, email addresses and organization role labels, was accessed.

Evidence and context

According to Chainalysis, the incident involved an external actor using what it described as "offensive agentic techniques" to gain unauthorized access to company systems. The firm said it has engaged third-party cybersecurity experts, is hardening its systems and has notified customers as its review continues. It also said the incident is not related to the recent crypto theft at Binance.

The company’s disclosure draws a distinction between the data it says was exposed and the material it says remained out of reach. Based on evidence available to date, Chainalysis said there was no indication of access to investigation content such as graphs, notes or cases, transaction or query results, passwords in clear text, MFA secrets or user session tokens. It said it is still determining the specific records tied to each organization affected.

Chainalysis also told users to remain vigilant for unexpected password reset requests or authentication prompts, and recommended enabling two-factor authentication where it has not already been turned on. The company said its work will continue and that it will provide updates relevant to affected customers as the investigation progresses.

The disclosure date is Oct. 30, 2026. The material supplied does not verify the date of initial compromise, only the date of the company’s public statement. No market data or token information was provided, so cryptocurrency price and market-cap figures are not applicable here.