Chainalysis, the blockchain analysis firm, said attackers who breached its network in October obtained names, usernames, password hashes and live tokens for all of its users.
The company said an external actor used AI agent-assisted offensive techniques, meaning automated software that carries out steps of an attack, to get into Chainalysis systems and internal tools. It described the incident as similar to hacks of other platforms during the same month. Separately, an email to affected customers said "non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed." It is not clear why the company called that information non-sensitive.
Two of the stolen items deserve a plain definition. A password hash is a scrambled version of a password, which an attacker can try to crack offline. A live token is a digital key that proves a user is already logged in, and one that still works can often be used without knowing the password at all. Tokens are the more urgent problem, since they can work immediately.
The customer list raises the stakes. Chainalysis and public sources have named the FBI, US Immigration and Customs Enforcement, the US Air Force, Microsoft, Coinbase and Barclays among its users. It is unclear whether the theft exposed those customers to further threats.
The tool is built to trace crypto transactions, so a roster of who has accounts, and what roles they hold, is useful to anyone interested in who is investigating whom. That is inference, not something the company has said. It also makes the "non-sensitive" label for names and role labels harder to defend.
The larger question is how an attack that leans on AI agents compares with the intrusions of earlier years. Nothing here says it was faster or cheaper than a conventional break-in, and the company has not published a timeline.