Blockchain analysis firm Chainalysis said hackers obtained sensitive information for all of its users, including names, usernames, password hashes, and live security tokens, following a breach of its network. The company's customer list includes government agencies such as the FBI, U.S. Immigration and Customs Enforcement, and the U.S. Air Force, as well as private companies including Microsoft, Coinbase, and Barclays.
Chainalysis disclosed last Friday that an external actor used AI agent-assisted offensive techniques to gain unauthorized access to its systems and internal tools during an October cyberattack. In an email to affected customers, the company initially said some customer data such as user IDs, full names, email addresses, and organization role labels had been accessed, describing the information as non-sensitive.
In an update Wednesday, Chainalysis said the ongoing multifront cyberattack included an on-path attack that exposed a subset of customer passwords. The company said it had identified and fixed the attack vector. On-path attacks, also known as adversary-in-the-middle attacks, occur when a hacker gains access to infrastructure transmitting traffic between two parties.
Chainalysis has not disclosed where the infrastructure compromise occurred or whether the data obtained was encrypted using TLS. The company has not said whether the data theft exposed customers to additional security threats.