Confirmed 7 Nov 2026 · Security A one-minute read

Chainalysis restored its screening products on November 7, after an intrusion exposed every user's live tokens.

The company says an external actor used offensive agentic techniques, and it took transaction monitoring and address screening offline for 3 days. Caveat: it says investigations data was not accessed.

Until now

An AI-assisted intrusion costs a firm some records and an apology.

Now

It can take a compliance utility banks depend on offline for days.

Why it matters

Banks and exchanges use Chainalysis to screen crypto addresses against sanctions lists. For 3 days that check was unavailable, so the screening itself stopped, not just the data behind it. The method was agentic, which is why the cost landed on everyone downstream rather than on one company's records.

Established

Names, usernames, password hashes and live tokens for all users were exposed.
Reactor, KYT and Address Screening went offline, then returned November 7.
Chainalysis attributes the intrusion to an actor using offensive agentic techniques.

Not established

How many customers were affected. Chainalysis has not said.
Which AI tools the attacker used, or whose models they were.
That law enforcement case data is safe. Only the company's own review says so.

The five-minute readThe record, the timeline, the weight and 4 sources

The record

We read the primary ourselves: Chainalysis's own incident page at chainalysis.com, headed Updated Nov 7: Chainalysis Security Incident Information, which carries timestamped updates. The newest, Saturday November 7, 2026 at 1:50 P.M. EST, says Reactor, KYT (UI and API) and Address Screening are now back online, restored with enhanced security measures, that customers must reconnect in a specific way, and that instructions were emailed. The sequence before it. Friday October 30: the first notice, reporting an external actor using offensive agentic techniques, with no evidence of access to investigation content, clear-text passwords, MFA secrets or session tokens; non-sensitive data was accessed, including user IDs, full names, email addresses and role labels; the notice says the incident is unrelated to the Binance theft. Monday November 2: Reactor and Data Solutions taken offline as a precaution, compliance transaction monitoring kept running. Wednesday November 4 at 9:50 A.M. EST: an on-path attack exposed a subset of customer passwords, those accounts were locked and resets required. At 10:30 A.M.: due to abnormal activity, KYT, other address screening products and the login page were taken offline. At 11:00 P.M.: the company said that on Monday it found names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor, that it continues to have no evidence any investigations data has been accessed or attribution data manipulated, and that it was directly notifying customers whose KYT accounts appeared to have been accessed without authorisation. Friday November 6 at 3:30 A.M. EST: phased restoration, customers asked to submit trusted IP addresses for an allowlist, then reset passwords and rotate API keys. Not established on the page: how many customers were affected, who the actor was, which AI systems were used, and how live tokens were obtained when the October 30 notice said session tokens were not accessed. That contradiction is the company's own.

How it got here

Oct 30
The first notice: an external actor using offensive agentic techniques. Chainalysis reports no evidence of access to investigation content, clear-text passwords, MFA secrets or session tokens, and says the incident is unrelated to the Binance theft.
Nov 2
Reactor and Data Solutions go offline as a precaution while compliance transaction monitoring keeps running. The company later says this is the day it found the full extent of the exposure.
Nov 4
Three updates in one day. At 9:50 A.M. EST an on-path attack exposed a subset of customer passwords and those accounts were locked. At 10:30 A.M. KYT, other screening products and the login page went offline. At 11:00 P.M. the company disclosed password hashes and live tokens for all users.
Nov 6
Phased restoration begins at 3:30 A.M. EST, with trusted IP allowlisting, password resets and API key rotation. The same day Microsoft publishes its own report on criminal use of the ARTEX agentic attack framework, this edition's second security card.
Nov 7
At 1:50 P.M. EST Reactor, KYT and Address Screening return with what the company calls enhanced security measures. This falls inside Edition 080's window and Edition 080 did not reach it.

Who has to react

Every bank and exchange that screens addresses through KYT, and the compliance officers who signed off on it; law enforcement customers of Reactor; sanctions regulators who expect screening to run without a gap; Chainalysis's competitors; and the insurers now pricing an agentic intrusion at a utility rather than at a single firm.

What to watch

Would strengthen itA second company that other firms depend on for a compliance or safety check takes that service offline for more than 24 hours after an intrusion it attributes to AI agents, by June 30, 2027.
Would strengthen itChainalysis publishes a root cause showing a conventional credential or configuration failure rather than agentic automation, or a regulator finds its controls inadequate, by March 31, 2027.
Would strengthen itAn indictment or government statement says the intruders chose Chainalysis in order to disable sanctions screening rather than to take data, by December 31, 2027.

Why it weighs this much

Signal strength

CostHigh

CommitmentHigh

ReversibilityLow

PersistenceYear

Cost is high. A compliance vendor turned off the product its customers are contractually obliged to run, for 3 days, and told them to rotate every API key. That is revenue, trust and switching risk, all taken voluntarily. Commitment is high: 7 timestamped public updates under the company's own name, each narrowing earlier reassurances, cannot be walked back. Reversibility is low, because an outage and a disclosure are both facts once published, whatever the root cause turns out to be. Persistence is years rather than structural: the products are back, but every customer now holds a procurement question about single-vendor screening, and that question outlives the incident.

The words

KYT: Know Your Transaction, the Chainalysis service that checks a crypto payment against sanctions and risk lists before a bank or exchange completes it.
Offensive agentic techniques: Attacks run by AI agents that pick their own next step, rather than by a person at a keyboard or a fixed script.
Live token: A credential a logged-in session already holds. Whoever has it is treated as the user, so changing the password alone does not lock them out.
On-path attack: An attacker sitting between two parties, able to read or alter the traffic passing between them. Formerly called man-in-the-middle.

Sources

Your call

Which explanation do you believe?

A call is final. Other people's calls show after yours.