Chainalysis Discloses Separate October 30 Security Incident Involving User Data

TL;DR: Chainalysis disclosed a security incident on October 30 affecting a subset of customer-related information, including names, email addresses and certain user or role labels, according to the company. “No evidence of compromise” is not proof that a particular system was mathematically impossible to access. The apparent boundary between identity information and investigative data is the central fact in this disclosure. Readers should not dismiss exposed contact details as harmless, but neither should they infer a breach of every product the company operates. Precision is particularly important when the firm itself works in cybercrime investigations. What the primary source establishes Chainalysis disclosed a security incident on October 30 affecting a subset of customer-related information, including names, email addresses and certain user or role labels, according to the company. It said there was no evidence that its investigative graph data, credentials or user sessions were compromised. This was a separate incident and should not be merged with Chainalysis’ analysis of the Binance theft. The dated original disclosure is the starting point for the figures and product scope ...