Industry / Security

Chainalysis, a firm tracing the Binance theft, says an attacker using "offensive agentic techniques" got into its systems and reached customer names and emails

A laptop on a desk. Chainalysis says an outside attacker accessed its systems and internal tools this month. File photo. Photo: seth schwiet / Wikimedia Commons (CC0)

Chainalysis, one of the firms tracing the record theft from Binance, says it was itself the target of a cybersecurity incident. In a statement posted on Friday, the company said it had notified all of its customers and was working with outside cybersecurity experts to investigate and harden its systems.

In a notice sent to customers, Chainalysis said an attacker using "offensive agentic techniques" gained unauthorized access to its systems and internal tools this month, according to The Block and The Hacker News. The data reached included user IDs, full names, email addresses and organization role labels for users on its platform, which the company described as non-sensitive.

Chainalysis says it has found no evidence so far that investigation content, authentication credentials or session tokens were accessed. It has not said how the attacker got in, when the activity was detected or how many customers were affected, and it declined to answer follow-up questions from The Block. The company told customers it will follow up with each one on exactly what information was involved, and advised them to turn on two-factor authentication and watch for unexpected password reset requests, The Block reports.

The company says the incident is not related to the Binance theft, which it has put at about $6.4 billion and attributed to North Korea's TraderTraitor group.

This story is reporting and analysis. It is not financial, legal or tax advice.