A crypto compliance giant just told every customer their credentials were in the blast radius.
On Wednesday night, November 5, 2026, Chainalysis updated a breach disclosure first issued on October 30. The earlier notice had said there was no evidence that authentication credentials or session tokens were compromised. The update reversed that: for all users, names, usernames, password hashes and live tokens were exposed.
How Chainalysis described the attack
The company said an external actor used “offensive agentic techniques” to gain unauthorized access to systems and internal tools. It did not explain those techniques further, but pointed to an industry-wide rise in AI-driven cyberattacks. Chainalysis serves more than 1,500 customers, including law enforcement, crypto and finance firms, regulators and national security organizations.
The firm said there was no evidence that investigations data was accessed or that attribution data was manipulated. All users must reset passwords and rotate API keys, and should visit the login page directly rather than clicking email links.
What went offline
Some Know Your Transaction (KYT) accounts appeared to have been accessed. Some passwords were exposed via an on-path attack that intercepted communications; that path was contained and those accounts were locked. Abnormal activity led Chainalysis to take the KYT UI and API, address-screening tools and login offline, with a restore planned for Thursday after IP allowlisting. Reactor and Data Solutions had already been taken offline Monday as a precaution.
Why it matters
Agentic attacks on SaaS identity and tokens are now a live sales conversation for security vendors. Compliance and fintech buyers will ask how you detect AI-driven intrusion and rotate credentials fast.
If you sell into regulated finance, treat password-hash and live-token exposure as a table-stakes scenario in your incident-response pitch.
Source: The Record. Written by the xRapid Media LLP team.
About xRapid Media
xRapid Media LLP is a High Tech B2B Marketing company for technology businesses: software and SaaS companies, IT services and managed service providers, and hardware and IT product vendors. Our team combines positioning and content, account-based marketing, paid ads funnels, verified B2B data, intent signals, email and LinkedIn outreach and appointment setting to help you reach the right buyers and turn their attention into qualified leads and meetings.
Want help putting ideas like these into practice? Email [email protected] or book a time with our team.