WorkOS suffers data breach after attacker uses ARTEX AI framework
TL;DR
An attacker used the ARTEX AI offensive framework to breach an internal WorkOS sales application. WorkOS identified the access on October 30, 2026. The intruder reached business contact details, account histories, and summaries of customer communications. Watch for highly targeted phishing or social engineering attempts that cite real conversation details.
What happened
WorkOS identified unauthorized access to an internal application used by its sales team on October 30, 2026. WorkOS says the attacker used an AI offensive security framework to automate reconnaissance and exploitation attempts, and founder Michael Grinich later identified it as ARTEX AI. Neither WorkOS nor BleepingComputer has said how the attacker got into the application.
The accessed data includes names, email addresses, phone numbers, job titles, and company affiliations from CRM systems. The attacker also accessed customer account histories, product usage metadata, and summaries or excerpts from sales calls, support discussions, and customer Slack conversations. WorkOS says it has no evidence that production services or WorkOS application data were accessed, and its analysis so far shows only CRM and customer support data were affected.
WorkOS has since disabled external access to the affected application, started a review of access controls on internal tools, and engaged an independent forensics firm. Its investigation found the user agents artex-enrich/1.0 and norma/0.4 in the attacker's web requests. Grinich says the incident is fully contained.
Why it matters
This incident adds to the growing use of AI agents in real-world intrusions. With tools like ARTEX AI, attackers can automate reconnaissance and exploitation attempts, making it easier to find and abuse internal business tools that are reachable from outside. Because the exposed data contains specific summaries of past sales calls and Slack discussions, attackers can craft highly convincing social engineering or phishing messages that reference real, recent interactions to bypass suspicion.
Who is affected
- The internal WorkOS application used by its sales team. WorkOS says production services and WorkOS application data show no sign of access.
- WorkOS customers whose business contact details, account histories, or communication summaries were held in the affected CRM and support data. WorkOS says it will contact affected customers directly.
What to do now
- Monitor for phishing or social engineering attempts that reference specific, private sales calls or support discussions.
- Verify all unexpected requests for sensitive information, even if they appear to reference real colleagues or past conversations.
- Search your web server and application logs for the user agents
artex-enrich/1.0andnorma/0.4, which WorkOS found in the attacker's requests.
What we don't know yet
- How the attacker first gained access to the sales application.
- Who was behind the attack. WorkOS has not attributed it to a named actor.
- The full scope of the incident. WorkOS says its investigation is ongoing and further updates will follow.
Sources
