Chainalysis security maintenance affects additional products and KYT features

The company describes offensive agentic techniques but identifies no attack framework, CVE or complete access window. Its investigation has found no indication of access to graphs, notes, cases, transaction or query results, cleartext passwords, MFA secrets or session tokens; that is an interim assessment, not proof exposure was impossible. Patching and external investigation continue. Chainalysis explicitly separates this event from Binance’s theft. L3 reflects confirmed customer-data access without an established mass-leak total.

November 2 service update: Chainalysis reports ongoing cyber threats associated with this incident. It has proactively disabled selected products, including Reactor and Data Solutions, pending further assessments with external security experts. Its blog says compliance transaction monitoring continues under close monitoring; the status-page exceptions below qualify that statement. These decisions do not establish new confirmed data exposure or completed containment; the investigation and organization-specific impact review continue.

Product-specific status: The November 2 status history qualifies the broader transaction-monitoring statement: KYT Graph preview and the KYT integration with Reactor are exceptions to normal KYT/Address Screening operation. It also identifies possible login issues, additional outages for Chain (Beta) and Rapid, and possible impact to some Hexagate monitoring. The November 3 14:30 UTC update adds that the Academy training platform may be inaccessible; maintenance continues. These availability effects do not establish additional data access or a completed recovery.

November 3 exam update: At 17:00 UTC on November 3, the company offered extra time or exam-deadline extensions as appropriate. Ask your established account manager about your specific exam; do not assume every deadline automatically changes.

November 3 administration update: The November 3 19:56 UTC update also warns of temporarily unavailable Customer Admin Portal functions. At 23:05 UTC, the company confirmed the previously affected portal functionality was restored. Check the incident detail and your account manager for remaining restrictions; this is not complete service or security recovery. This does not establish additional confirmed data access or unavailability of every portal function.

November 3, 23:05 UTC restoration: The previously affected Customer Admin Portal functionality is restored. The same original update explicitly keeps broader security maintenance ongoing; the incident also lists Rapid Lookup alongside Reactor. This does not announce full product recovery, change the KYT exceptions, or resolve the data-scope investigation. Earlier exam accommodations and credential precautions remain applicable.