Chainalysis says cybersecurity incident exposed some non-sensitive customer data
In brief
- Chainalysis said in a Friday blog post that it was targeted in a cybersecurity incident.
- Some non-sensitive customer data was exposed, the company said.
- Its investigation to date found no evidence of access to investigation content, credentials or session tokens.
- Chainalysis said the incident wasn't related to the recent crypto theft at Binance.
- Third-party experts and large language models are supporting a review of its security.
What Chainalysis said
Chainalysis said in a Friday blog post that it was targeted in a cybersecurity incident, and it described the event as similar to incidents suffered recently by other platforms. That's the only comparison the company offered.
The main finding is preliminary. Chainalysis framed it as the result of its investigation to date (not a finished review), and it covers three areas: investigation content, authentication credentials and session tokens.
"Based on the investigation to date, we have found no evidence of unauthorized access to investigation content, authentication credentials, or session tokens,"
Some customer data was exposed, the company said. Chainalysis called that data "non-sensitive," and that's the only description of it in the statement as reported.
Outside experts, plus LLMs
Chainalysis said it had engaged world-class third-party cybersecurity experts and was using large language models to support a review of its security and strengthen its defenses. Which firms are involved? The report doesn't name them. It's still a notable detail, since a blockchain analytics company is now putting LLMs to work on its own security review.
The company also said the incident wasn't related to the recent crypto theft at Binance.
A busy week for Chainalysis research
The disclosure came during an active stretch for the firm's research team. On Thursday, Cointelegraph reported that Chainalysis had mapped a network of Russian intermediaries that helped North Korean IT workers cash out millions of dollars in cryptocurrency. On Friday, Chainalysis posted on X that suspected North Korea-linked hacks accounted for almost 89% of reported crypto hack losses this year, up from 15% in 2021.
Both of those are findings about the wider crypto market. They aren't details of the incident, and this report doesn't connect them to it.
For now, what we know comes from the company's own account: an incident similar to those at other platforms, some non-sensitive customer data exposed, and a review that's still running with outside help.
Frequently asked questions
Was customer data exposed in the Chainalysis cybersecurity incident?
Chainalysis said some non-sensitive customer data was exposed. Based on its investigation to date, it said it found no evidence of unauthorized access to investigation content, authentication credentials or session tokens.
Is the Chainalysis incident related to the Binance crypto theft?
No, according to Chainalysis. The company said the security incident was not related to the recent crypto theft at Binance, and described it as similar to incidents recently suffered by other platforms.
How is Chainalysis responding to the incident?
Chainalysis said it had engaged third-party cybersecurity experts and was using large language models to support a review of its security and strengthen its defenses.
