The lead
Chainalysis says names, usernames, password hashes and live tokens for all its users were exposed in an attack that used AI agents
Its customer list includes the FBI, ICE, the US Air Force, Microsoft, Coinbase and Barclays. The company found the exposure on Monday but disclosed it on Wednesday, and has said nothing about how the AI agents worked.
Chainalysis first called the October breach a leak of non-sensitive data, then said on Wednesday that an on-path attack had exposed credentials for every user. It took its login page and its KYT transaction monitoring offline; customers now need allow-listed IPs and a mandatory credential reset to get back in.
JOBChainalysis KYT and Address Screening are standard compliance tools; for KYC and compliance interviews, have the line ready that the screening vendor itself was down this week and every bank user had to rotate credentials, so vendor outage plans are part of the job.