Blockchain analysis firm Chainalysis disclosed that hackers obtained sensitive information for all its users following a network security breach in October, according to statements from the company.
The compromised data includes names, usernames, password hashes and live tokens, according to Chainalysis. The company’s customers include government agencies such as the FBI, US Immigration and Customs Enforcement, and the US Air Force, as well as private companies including Microsoft, Coinbase and Barclays, according to both Chainalysis and public sources.
Chainalysis initially disclosed the incident last Friday, stating that an external actor used “AI agent-assisted offensive techniques” to gain unauthorized access to company systems and internal tools. The company told affected customers that “non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed.”
In a Wednesday update, Chainalysis said part of the “ongoing multifront cyberattack” involved an “on-path attack”—also known as an adversary-in-the-middle attack—that exposed a subset of customer passwords. The company said the attack vector has been identified and fixed. On-path attacks occur when a hacker gains access to infrastructure handling traffic between two parties.
Chainalysis has not disclosed where the infrastructure compromise occurred or whether the obtained data was TLS encrypted. The company said the October breach was similar to hacks of other platforms during the same month.