American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data.
However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens.
“This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools,” Chainalysis said Friday.
“Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users.”
The company said it’s patching vulnerabilities and hardening its systems in response to the incident.
The mention of “offensive agentic techniques” indicates that an artificial intelligence (AI)-powered tool was used to execute the attack, although Chainalysis offered no details on the specific methods or tactics employed.
“We are seeing an industry-wide rise in AI-driven cyber attacks, and we are taking a whole-of-company approach to make sure our security posture meets the evolving environment and our customers’ expectations,” it said.
The development comes as adversarial use of AI has ramped up in recent months, with various threat actors using the technology to automate different stages of the attack lifecycle and target hundreds of organizations across multiple industries.
This includes a China state-backed threat group known as Vapor Panda, which is using ARTEX, an agentic penetration testing framework, to conduct attacks at scale, compromising about 140 targets in a span of 11 days as part of broad access operation.
“AI mainly improves established attacks by making them faster, more personalized, and easier to scale,” Abnormal AI said. “Agentic intrusion chains and prompt injection are more distinct because they depend directly on deployed AI systems.”
