WorkOS data breach via ARTEX AI framework
Original title: WorkOS says attacker used ARTEX AI to breach internal sales app
Attacker used ARTEX AI to access business contacts and customer communications summaries.
Developer platform WorkOS suffered a data breach on October 30 2026 after a threat actor accessed an internal sales application. The attacker used the ARTEX AI offensive security framework to automate reconnaissance and exploitation attempts. WorkOS disabled access to the affected application, contracted an independent forensics firm, and is notifying affected customers while warning of potential phishing attempts leveraging exposed data. No WorkOS app data or production services were accessed.
Unconfirmed: Full impact and investigation outcomes remain pending after forensics review
- ARTEX AI framework used for automated reconnaissance and exploitation
- Data accessed includes business contacts, customer histories and communications summaries
- No production services or app data were affected
- Framework observed in prior attacks targeting South Korean banks and organizations by Vapor Panda
- WorkOS is sharing investigation findings after forensics review
Impact: Unauthorized access to business contact records and customer communications summaries
- 1.Notify affected customers
- 2.Disable external access to affected application
- 3.Hire independent forensics firm
- Vendors
- WorkOS
- Products
- internal sales application
From the original article
2 min read at bleepingcomputer.com
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.