WorkOS discloses breach of internal sales systems exposing business contact data
WorkOS has notified customers of a security incident detected on October 30, 2026, which is still under investigation. The company says anomalous traffic reached an internal business system, and it believes an AI-assisted autonomous penetration testing framework called ARTEX was behind the attack, originating from IP addresses in Hong Kong and China. The intruder reached an internal API used by sales and marketing tools, which gave access to data in Salesforce and Snowflake instances. Exposed information reportedly includes business contact details, commercial account information, de-identified usage metrics, and support tickets. WorkOS states there is no evidence that customer application data or production services were accessed.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in