Chainalysis incident: what data was accessed

On October 30, 2026, Chainalysis disclosed unauthorized access to some customer information and published the notice sent to affected organizations.

Which data was accessed

The company lists user IDs, full names, email addresses and organizational role labels for users of its platform.

According to the investigation so far, no indications were found of access to investigation graphs, notes or cases; transaction or query results; clear-text passwords; MFA secrets; or session tokens.

How the company is responding

Chainalysis says it notified customers, is patching vulnerabilities and engaged external cybersecurity specialists. The company states that the incident is unrelated to the recent cryptocurrency theft at Binance.

The company is determining which records were accessed for each organization and says it will provide detailed breakdowns and further updates.

Recommendations for users

Chainalysis recommends vigilance around unexpected password reset requests or authentication prompts. It also recommends enabling two-factor authentication where it is not already in use.

Source: Chainalysis: incident disclosure and customer notice, October 30, 2026