Chainalysis

An outside actor reached Chainalysis's systems and internal tools in an intrusion detected in October 2026, taking user IDs, names, email addresses, and organization role labels for customers on its platform. Chainalysis credits an AI-powered attack tool and has not named the entry point. Its remedy is patching vulnerabilities, which concedes that the openings were already there for a machine to find. A named roster of who investigates crypto, and in what role, counts as non-sensitive only until someone reads it.