- Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.
- The breach did not expose investigation content, authentication credentials, or session tokens.
- The company cited an industry-wide rise in AI-driven cyber attacks.
- China-backed threat group Vapor Panda used the ARTEX AI penetration testing framework to compromise about 140 targets in 11 days.
On Friday, American blockchain analysis firm Chainalysis disclosed a cybersecurity incident in which an external actor gained unauthorized access to its systems and internal tools. The company said the attacker used “offensive agentic techniques” to access non-sensitive customer data.
However, Chainalysis noted that the breach did not result in unauthorized access to investigation content, authentication credentials, or session tokens. The exposed information included “user IDs, full names, email addresses, and organization role labels for users provisioned on our platform.”
The company said it is patching vulnerabilities and hardening its systems in response. “We are seeing an industry-wide rise in AI-driven cyber attacks, and we are taking a whole-of-company approach to make sure our security posture meets the evolving environment and our customers’ expectations,” it said.
Meanwhile, the incident comes as adversarial use of AI has ramped up in recent months. A China state-backed threat group known as Vapor Panda is using ARTEX, an agentic penetration testing framework, to compromise about 140 targets in 11 days as part of a broad access operation.
Abnormal AI said: “AI mainly improves established attacks by making them faster, more personalized, and easier to scale. Agentic intrusion chains and prompt injection are more distinct because they depend directly on deployed AI systems.”
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
