Blockchain analytics firm Chainalysis, whose tools are used by exchanges and law enforcement to trace crypto flows, disclosed a security incident in a notice to customers. An external attacker using "offensive agentic techniques" gained access to its systems and internal tools in October.

The exposed data includes user IDs, full names, email addresses and organization role labels. The company found no sign that investigation graphs, cases, notes, query results, passwords, MFA secrets or session tokens were accessed.

Chainalysis has not disclosed how many users or organizations were affected and says the incident is unrelated to the recent Binance theft.

The firm has notified all customers, brought in outside security experts and is patching the exploited vulnerabilities. Names, work emails and roles could still be used for targeted phishing against customer staff.