Chainalysis says an outsider used AI attack tools on its systems
Chainalysis told customers on October 30 that an outside actor used what it calls offensive agentic techniques, meaning AI-driven attack tooling, to get unauthorized access to undisclosed internal systems and tools. According to Chainalysis, some non-sensitive customer data was accessed: user IDs, full names, email addresses and role labels. The company says it has no evidence that investigation content, passwords, multifactor secrets or session tokens were accessed. It has not said how many customers are affected or who the actor is, and is still working out which records belong to each organization.
Alan's takeIf an attacker uses an agent against you, what can it reach with one stolen login, and who is told the same day?