{ "type": "bundle", "id": "bundle--34f10c3d-959c-5791-8b37-aa842ac077fa", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--ec6497af-5e90-54ff-8e1c-1a88dc8e25da", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "org:597d65d7-aead-40ad-8b3d-5370123c6b7c", "name": "Chainalysis", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--0341a9a0-2027-5dce-865a-78b55a92c291", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "inc:215f3cb8-e306-4b93-9ef9-4f94a6f1a8d0", "name": "Chainalysis customer-profile data incident" }, { "type": "incident", "spec_version": "2.1", "id": "incident--b2e95a47-f0e4-523b-8d0a-08a1a0b8c864", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "brh:cb72fd80-f0e3-4496-99fa-c3a44bb0bcac", "name": "Chainalysis customer-profile data incident" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f15f7be-3632-59ae-844a-c0d87753d703", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:377636d0-e292-497e-8db0-136a78243527", "relationship_type": "resulted-in", "source_ref": "incident--0341a9a0-2027-5dce-865a-78b55a92c291", "target_ref": "x-ally-event--a65352eb-9652-5ddd-878d-e47d407e288f", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:1b7762d3-1049-4f17-ad57-87b2f87267f9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--887e99d9-7085-5a37-86f7-4ae5db504f11", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:8b2ed0f4-d873-47ab-bb5d-f1d910d53d46", "relationship_type": "affected-organization", "source_ref": "incident--0341a9a0-2027-5dce-865a-78b55a92c291", "target_ref": "identity--ec6497af-5e90-54ff-8e1c-1a88dc8e25da", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:e086d4d0-0a65-48a0-905f-e343a49e502d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0747fdc8-bffe-52e4-8bbd-08cb6c3cd105", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:5766506a-3308-4d66-b15e-0866b3434ddf", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:5ec96e68-ae43-49fd-89f9-8bc719c18bcb", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-30" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--17f61b01-e030-5803-8640-c98dd50afd3e", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:cc53e097-51c4-4793-807d-abd6bfa58ec1", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:9f0f7781-eab6-410d-8506-918a9b938a9a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "As of its October 30 notice, Chainalysis had no indication of access to investigation graphs, notes or cases, transaction or query results, cleartext passwords, MFA secrets or session tokens." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--418d5298-d5af-5816-83a1-a5c5a593746f", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:fb0aeab9-b84f-43ce-ba20-3064193869fb", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:3d1f0228-b800-4b98-b666-daae205aa430", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Chainalysis explicitly said this incident was unrelated to the separately reported Binance theft." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--57d5f77c-a72c-56b2-8e85-4bec4cb74499", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:1acc83df-280d-42a3-8612-2782b03301ed", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:453775db-9e3e-4a36-ab7f-1f87f745eeda", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-30" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--8b384dd1-2528-5e32-80ea-b4c8d020f7b4", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:ce25b5b3-6163-4b66-a7b9-6ed0f508e748", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:c0f9bab7-eae0-4303-a2e8-ac3120d5229f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Chainalysis proactively notified all customers while continuing to determine affected records and working with outside experts. It recommended two-factor authentication and vigilance against targeted phishing." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--ceeafc85-3118-5b42-86d4-663b36e21dc6", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:7da3d003-ce7a-45b2-b4fe-e2e9450a3a78", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:da8bc17c-8b57-4442-b52c-ee83306454ab", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Chainalysis said it detected an external actor accessing internal systems and tools during October 2026; the exact access and detection dates were not disclosed." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--ee9aa8f2-b1c3-5d8e-8924-a924b2b865bb", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:b2a5ae14-11dc-48f0-8370-76344e345c6a", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:d3c68764-866e-4c8f-ad94-a628bbbae0ea", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Chainalysis confirmed access to customer user IDs, full names, email addresses and organization-role labels." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--fa7b1985-305d-5918-8ff1-bcf03e4c2f26", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "clm:534225ec-6dbf-4f93-9d55-cbcdbbe5fd33", "confidence": 100, "external_references": [ { "source_name": "Chainalysis", "url": "https://www.chainalysis.com/blog/security-incident-october-30/", "external_id": "cit:529a1c04-8dbb-462d-896e-ae8ac921851c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:831753751e7e59ef2dba7f0d00ef3f2b99bd238ea9152682e371047e496f3bd6" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Chainalysis described offensive agentic techniques and said it patched vulnerabilities; it did not publicly establish a precise exploit path or actor identity." } }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--a65352eb-9652-5ddd-878d-e47d407e288f", "created": "2026-10-31T14:10:17.070783+00:00", "modified": "2026-10-31T14:10:17.070783+00:00", "x_ally_original_id": "evt:74361578-747d-4f30-ad41-84bdf3a0f6cb", "name": "Customer-profile access publicly disclosed" } ] }