The blockchain-analytics firm says an external actor used agentic AI techniques to access internal systems, exposing customer names and emails but not investigation data or credentials.