Chainalysis has confirmed a cybersecurity incident in which an external actor gained unauthorized access to some of the company’s systems and internal tools. The incident exposed non-sensitive customer information associated with users provisioned on its platform.
According to the company, the accessed data included user IDs, full names, email addresses and organization role labels. Chainalysis said the information included data relating to the affected customer’s organization and users.
The company stated that the intrusion did not provide unauthorized access to investigation content, authentication credentials or session tokens. It is patching vulnerabilities and strengthening its systems in response.
Chainalysis described the activity as involving “offensive agentic techniques,” but did not provide details about the specific methods or tactics used. The wording indicates that an AI-powered tool may have been involved in carrying out the attack.
The company said it has observed a broader increase in AI-driven cyberattacks and is taking a company-wide approach to adapting its security measures to the changing threat environment.
The incident comes amid increased use of artificial intelligence by threat actors to automate parts of the attack lifecycle. Abnormal AI said AI primarily makes established attacks faster, more personalized and easier to scale, while agentic intrusion chains and prompt injection are more directly dependent on deployed AI systems.
Sources: The Hacker News.