WorkOS breach traced to ARTEX, an autonomous AI penetration-testing framework
WorkOS reports security breach
WorkOS is notifying customers of a data security incident detected on October 30, 2026, when anomalous traffic hit an internal business system. Investigators found the attack was likely driven by ARTEX, an AI-assisted autonomous penetration-testing framework, from IP addresses in Hong Kong and China. The intruder reached an internal API behind the sales and marketing tools, exposing Salesforce and Snowflake data: names, emails, phone numbers, mailing addresses, commercial details, usage metrics, and support tickets. WorkOS says it found no evidence that customer application data or production services were touched.
Our investigation identified evidence the attack was likely driven by ARTEX, an AI-assisted, autonomous penetration testing framework, from IP addresses based in Hong Kong and China.
- grinich
Hi everyone - WorkOS CEO here.
WorkOS's production systems are secure. No customer platform data was accessed. This incident was isolated to internal GTM systems.
The attack involved ARTEX, an autonomous AI agent framework used to carry out offensive security operations. It's a striking example of how quickly the capabilities of attackers are evolving.
We've contained the incident, brought in independent experts to investigate, and are working through the details.
Security is something we take extremely seriously, and I believe in being transparent when things go wrong. We'll continue to share updates as we learn more.
Here’s the full post: https://workos.com/security/bulletins/october-30th-2026-data...
If you are a customer and would like to have a call with our security team, please send a note to [email protected]
- majorchord
> We have no evidence that your application data was accessed.
Translation: We don't know how we were hacked and can't tell what anyone did or didn't look at.
In that case I would treat it as full compromise and urge everyone who might be potentially affected to change password, rotate keys, whatever you need to do to protect yourself.