Chainalysis Discloses Cybersecurity Incident, Says No Evidence of Access to Investigation Data or Credentials
Key Takeaways
- •Chainalysis reported that attackers gained unauthorized access to its systems, but its investigation found no evidence that sensitive case material such as investigation graphs, case notes, transaction results, or query results was accessed.
- •The company stated there is no evidence that passwords, multi-factor authentication secrets, or session tokens were compromised in the incident.
- •Some customer information, including user IDs, names, email addresses, and organizational roles, may have been accessed according to the security notice.
- •Chainalysis has not disclosed how many customers were affected or how attackers entered its systems, leaving these as key unresolved details.
- •The company is working with external cybersecurity experts and has notified customers, with further updates expected as the investigation continues.
Blockchain analytics firm Chainalysis has disclosed a cybersecurity incident involving unauthorized access to its systems, saying that an investigation has found no evidence attackers accessed sensitive investigation data, passwords, or authentication credentials.
In a security notice published on October 30, 2026, the company said it was working with external cybersecurity experts to investigate the incident, determine its scope, and strengthen its systems.
According to the notice, some customer information may have been accessed, including user IDs, names, email addresses, and organizational roles. Chainalysis has not disclosed how many customers were affected or how attackers gained entry to its systems.
The company said there was no evidence that attackers accessed investigation graphs, case notes, transaction results, or query results, the categories of case material that underpin the investigative work performed on its platforms. It also reported no evidence of compromised passwords, multi-factor authentication secrets, or session tokens.
Founded in 2014 and headquartered in New York, Chainalysis provides blockchain analysis and compliance software, including its Reactor investigation platform and Know Your Transaction (KYT) compliance tools, to cryptocurrency businesses, financial institutions, and government agencies worldwide. That customer base reflects the sensitivity of the data such firms hold, and the incident underscores the security stakes facing blockchain analytics providers, which handle sensitive financial intelligence for cryptocurrency businesses, financial institutions, and law enforcement agencies.
Chainalysis said it had notified customers of the incident and would provide further updates as its investigation progresses. The number of customers affected and the method of entry remain the key undisclosed details, with the company saying further updates will follow as its work with external cybersecurity experts continues.
