Chainalysis said in an October 30 notice that customer account information, including user IDs, full names, email addresses and organization role labels, had been accessed during a cybersecurity incident. The blockchain analytics company said it was still determining which records had been accessed for each organization.
The company said it detected unauthorized access to its systems and internal tools during October. Its notice does not give a specific detection date or a total number of affected records. It includes the text of an email sent to impacted customers, some of whom it said had previously been notified.
That email separates the account details it says were accessed from other categories covered by its investigation. Based on the evidence available at the time, Chainalysis said it had found no indication of unauthorized access to investigation graphs, notes or cases, or to transaction and query results. It also listed clear-text passwords, MFA secrets and user session tokens among the categories for which it had found no indication of access.
Those statements describe the company's preliminary findings. They do not establish that access to those categories never occurred. The investigation remained ongoing in the published notice, with the organization-specific record analysis still being completed.
Chainalysis said it had proactively notified all customers and would provide detailed breakdowns as its analysis progressed. It did not give a deadline for those breakdowns. For affected organizations, the notice therefore identifies types of account information involved without yet supplying a completed list of their accessed records.
Cointelegraph reported on the disclosure on October 31, linking to the company statement. Its report repeats the company's account; it does not supply independent forensic confirmation or establish when the unauthorized activity began.