Chainalysis breach exposed customer names, emails and company roles

The Chainalysis breach exposed customer names, email addresses, user IDs and organization role labels, the blockchain analytics company said. It urged users to scrutinize unexpected password-reset requests and authentication prompts.In an Oct. 30 disclosure, the company said it detected an external actor gaining unauthorized access to its systems and internal tools that month. It was still determining which records had been accessed for each affected organization and promised detailed breakdowns when that work was complete.The disclosure lists data categories without establishing that every listed field was accessed for every user. It did not give an affected-record total, identify the intruder or specify the exploited vulnerabilities. It also said the incident was unrelated to the recent crypto theft involving Binance.Based on the evidence available at disclosure, Chainalysis said it had found no indication of unauthorized access to investigation content, including graphs, notes or cases; transaction or query results; clear-text passwords; multifactor authentication secrets; or user session tokens. The finding remains provisional while the investigation continues.Chainalysis said ...