Chainanalys - a company that monitors crypto hackers, was itself hacked

[greysonz]

Chainalysis informed clients that an attacker, using "offensive agent-based techniques," gained access to user names, email addresses, and roles.

Non-sensitive customer data is affected: names, email addresses, user IDs, and user roles in the organization.

Increasingly, AI is not a shield, but a sword in the hands of attackers.


https://x.com/IntCyberDigest/status/2116257776045281620?a=dr3-18XXE23dO_57JK0&s=19

[Darker45]

LOL! The company that analyzes crimes, hacks, and whatnot failed to analyze their own security. At least they're already done analyzing the hacker that compromised Binance funds. They now have time to analyze who this "external actor" using "offensive agentic techniques" is.

But what the heck are they thinking dismissing full names, email addresses, user IDs, organization roles, and records of their client organizations as non-sensitive? It smacks of irresponsibility and arrogance in the face of obvious incompetence.

[bitmover]

Chainalysis informed clients that an attacker, using "offensive agent-based techniques," gained access to user names, email addresses, and roles.

Non-sensitive customer data is affected: names, email addresses, user IDs, and user roles in the organization.

Increasingly, AI is not a shield, but a sword in the hands of attackers.


https://x.com/IntCyberDigest/status/2116257776045281620?a=dr3-18XXE23dO_57JK0&s=19

I am impressed that they consider full names and email "non sensitive data"

[joniboini]

I wouldn't be surprised if they changed the wording in a follow up email or announcement. That being said, when they mentioned password in clear text, does this mean somewhere in the system they store that data? Or they're referring to user input before the password was hashed?

This week is full of security incidents surprisingly. I wonder when will things quite down a bit (though database leaks tends to happen even more regularly now).

[Synchronice]

Things are heating too much. October is full of so many attacks, thefts, compromise and hacks that this is not normal and everything's happening around crypto and includes every crypto related service. The severity of incidents and financial impact of attacks are probably unprecedented. I wonder if this leads to new and stricter regulations in crypto space? But it looks still strange to me that so many severe things happened in October in a row.

I wouldn't be surprised if they changed the wording in a follow up email or announcement. That being said, when they mentioned password in clear text, does this mean somewhere in the system they store that data? Or they're referring to user input before the password was hashed?

In 2019, a bug on Coinbase's sign-up page exposed plain-text registration details for 3,420 users. Their passwords were written in plain text to internal server web logs. Even though we don't know for sure what happened, I think that this would be the case with Chainanalysis since internal tools were accessed too.

[logfiles]

I am not in support of hacking but when companies that have abused people's privacy and earned a lot of money through this get a test of their medicine, it becomes pretty interesting.

How funny of them to consider that User IDs, Full names, Email addresses among other things are non sensitive? This my friends are the reasons why we hate such platforms. Glad I never signed up or used them before.

[Upgrade00]

I am impressed that they consider full names and email "non sensitive data"

I am still stuck on why someone will offer that information to them at all. I hesitate to give that kind of data to services that are absolutely essential to me.

[aioc]

They should be the most secure platform, but I guess no platform is secure now, hacking has now become an AI game with the use of

"offensive agentic techniques": the use of autonomous or semi-autonomous AI agents—powered by large language models (LLMs) or specialized frameworks—to plan, execute, and chain together multi-step cyberattacks with minimal human supervision

Chainalysis Says Attacker Used Agentic AI Techniques to Access Internal Systems

With this kind of hacking, we are ushering an AI used and minimal human supervision attack, its going to be frequent and consistent, so companies should brace themselves its going to be ugly if they have weak security.

[bitmover]

I am impressed that they consider full names and email "non sensitive data"

I am still stuck on why someone will offer that information to them at all. I hesitate to give that kind of data to services that are absolutely essential to me.

Probably even our names are there
Exchanges that we completed KYC verification sell our data to chain analysis. And they leak it and call it "non sensitive "

[hugeblack]

LOL! The company that analyzes crimes, hacks, and whatnot failed to analyze their own security. At least they're already done analyzing the hacker that compromised Binance funds. They now have time to analyze who this "external actor" using "offensive agentic techniques" is.

In reality, a company that generates revenue from all its users' data—whether through legal or illegal means, and even when some of that data is inaccurate—fails to protect the information it holds, which can ultimately lead to harm for those users.
Frankly, all these attacks should serve to raise awareness regarding privacy and drive the implementation of legislation that mandates the destruction of user data, rather than allowing it to be kept indefinitely and passed on to third parties.

[mindrust]

I think Sam Altman recently said thanks to AI everybody and every business is at risk of getting hacked now. OpenAI and Anthropic's own services will probably won't let their users to build these dangerous tools but that doesn't really matter because you can run a local ai server in your potato computer (PC) nowadays and it is still capable of doing malicious things.

We will see more of those news in the next weeks so better get ready and don't keep your big amount of coins on the crypto exchanges. If this gets our of hand, people will look for alternatives and there are two:

1- Bitcoin, in a cold wallet
2- GOLD, bitchez

[ABCbits]

If the hacker sold the data or share the data publicly, we may able to know which company (such as crypto exchange) that use Chainanalys service.

But what the heck are they thinking dismissing full names, email addresses, user IDs, organization roles, and records of their client organizations as non-sensitive? It smacks of irresponsibility and arrogance in the face of obvious incompetence.

It probably show their viewpoint about people's privacy in general .

[coin-investor]

Chainalysis informed clients that an attacker, using "offensive agent-based techniques," gained access to user names, email addresses, and roles.

Non-sensitive customer data is affected: names, email addresses, user IDs, and user roles in the organization.

This is an insult; we protect our identity online by only choosing the right platform to do KYC, then this so-called blockchain company, which promised risk exposure, prevent fraud to happen, will treat our sensitive information as non-sensitive. So what are their definitions of sensitive information? This is an iresponsible statement.

Increasingly, AI is not a shield, but a sword in the hands of attackers.

It depends on who is using it; for responsible people, it is a useful tool to serve their clients, users, and the industry; it's not the tool, but the one who uses it.

[Alpha Marine]

But what the heck are they thinking dismissing full names, email addresses, user IDs, organization roles, and records of their client organizations as non-sensitive? It smacks of irresponsibility and arrogance in the face of obvious incompetence.

They know what they are doing. It's not incompetence.
They are trying to downplay it so it doesn't sound serious. They know how sensitive full names and emails are, not to mention ID cards. It's a way to save face. Those are the actual reasons why the hackers attempted it at all. What else could they have that would be more sensitive than users' personal information? It's not like they keep user's funds.
It's a very poor way of trying to save face. Since they have already announced it, there is no point in downplaying it. They could simply state how severe the problem is. Except they think people who would read their statements are idiots who won't know what sensitive information is.