WorkOS data breach linked to ARTEX AI framework after intrusion into internal sales app
Developer platform WorkOS disclosed that a threat actor used the ARTEX AI offensive security framework to breach an internal sales application, accessing business contact records and summaries of customer communications. The company said no app data or production services were affected and that the incident has been fully contained.
BleepingComputer
WorkOS, a developer infrastructure company whose authentication and identity tools are used by thousands of businesses, has disclosed a data breach in which a threat actor accessed business contact records and summaries of customer communications.
In an incident alert, the company said it identified unauthorized access on October 30, 2026, to an internal WorkOS application used by its sales team.
According to evidence gathered during the investigation, no WorkOS app data or production services were accessed or affected. The company provides APIs, SDKs, and tools for integrating enterprise authentication, single sign-on, user management, and identity management into applications, and its website lists at least 3,000 companies as customers, including OpenAI, Anthropic, Cursor, Perplexity, Snowflake, Plaid, Webglow, and Netlify.
After detecting the intrusion, WorkOS disabled external access to the affected application and reviewed access controls on its internal tools. It also contracted an independent forensics and incident response firm to track the unauthorized activity and determine the full impact of the breach.
The company said it will notify affected customers directly and urged users to remain vigilant for phishing or social engineering attempts that could leverage the exposed information.
WorkOS said the attack employed an AI-powered offensive security framework to automate reconnaissance and exploitation attempts. Founder Michael Grinich said the attacker used the ARTEX AI penetration testing suite, which has been observed in multiple incidents this year.
ARTEX AI was released earlier this year by Chinese developers as an open-source project for offensive security. It became private after being used in attacks targeting South Korean banks, although several forks of its code remain available.
The framework has surfaced in other notable incidents. CrowdStrike reported that the cyber-espionage group Vapor Panda used it in a global campaign targeting 200 organizations, and the non-profit cybersecurity organization DIVD said the same framework powered attacks it suffered last September.
Grinich said the investigating team identified user agents such as 'artex-enrich/1.0' and 'norma/0.4' in web requests from the threat actor. He stated that the incident has now been fully contained and promised to share more information about the attack once the investigation is complete.