Workos - GoKawiil

WorkOS discloses breach of internal sales app, cites AI attack tool ARTEX

WorkOS says it detected unauthorized access to an internal sales application on October 30, 2026, with an attacker reportedly using an AI-driven offensive security framework called ARTEX to automate reconnaissance and exploitation. The company says exposed data included business contact details, customer account histories, and summaries of sales calls and support conversations, but no production services or app data were affected. WorkOS disabled external access to the app, hired forensics investigators, and pledged to notify affected customers.

bleepingcomputer.com · 2026-11-03

WorkOS discloses breach of sales CRM and support data

WorkOS notified customers of a data security incident first detected on October 30, 2026, after anomalous traffic hit an internal business system. The company says an unauthorized actor accessed an internal sales and marketing API, which in turn exposed data from its Salesforce and Snowflake instances, including customer names, emails, phone numbers and business contact details. WorkOS states it found no evidence that application data or production services were affected, and believes the breach was limited to CRM and support data.

news.ycombinator.com · 2026-11-02