Chainalysis said the attack did not compromise investigation content, transaction or query results, passwords in clear text, or other credentials and secrets. However, some non-sensitive customer data was accessed, including user IDs, full names, email addresses and organisation role labels for users provisioned on its platform. The company has not said how many individuals were affected and is still investigating the full scope of the incident.

It also stressed that the incident is unrelated to the recent $6.36 billion Binance heist attributed to North Korean hackers. Because names and email addresses were taken, Chainalysis is advising users to watch for unexpected authentication prompts and password reset requests, and to ensure multi-factor authentication is enabled.

The company said it has observed an industry-wide rise in AI-driven cyberattacks, with many other tech platforms hit in recent weeks, and is working with external cybersecurity experts and large language models to review its security posture. That chimes with a warning from Cloudflare CEO Matthew Prince, who told Reuters in October 2026 that LLM technologies accelerating vulnerability discovery mean "a couple years where every single week it's going to feel like the sky is falling".