Chainalysis reported an October intrusion that blended AI-agent-assisted access with an on-path segment exposing some customer passwords; attackers took names, usernames, password hashes and live tokens for every user plus user IDs, full names, emails and organisation-role labels the company called