WorkOS says attacker used ARTEX AI to breach internal sales app

Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.

According to the company, the attacker used an AI offensive security framework to automate reconnaissance and exploitation attempts.

Based on evidence from the investigation, no WorkOS app data or production services were accessed or affected.

WorkOS is a developer infrastructure company that provides APIs, SDKs, and tools for integrating services such as enterprise authentication, single sign-on (SSO), user management, and identity management into applications.

According to its website, at least 3,000 companies use its services, including OpenAI, Anthropic, Cursor, Perplexity, Snowflake, Plaid, Webglow, and Netlify.

“On October 30, 2026, we identified unauthorized access to an internal WorkOS application used by our sales team,” the company says in an incident alert.

Data accessed by the attacker includes:

• Business contact details (names, email addresses, job titles, and company affiliations from the CRM systems)
• Customer account histories (product usage and connection or directory health)
• Customer communications (summaries and excerpts from sales calls, support discussions, and customer Slack conversations)
• Business account and relationship information (account histories, information about sales and customer relationship)

After detecting the intrusion, WorkOS disabled external access to the affected application and reviewed its access controls on internal tools.

The company also contracted an independent forensics and incident response firm to track the unauthorized activity and determine its full impact.

The company promised to notify affected customers directly, and warned its users to remain vigilant for phishing or social engineering attempts leveraging the exposed information.

ARTEX AI likely powering the attack

WorkOS’s announcement says the attack used an AI-powered offensive security framework to automate reconnaissance and exploitation attempts.

Company founder Michael Grinich shared more details, saying that the attacker used the ARTEX AI penetration testing suite that has been observed in multiple incidents this year.

Released earlier this year by Chinese developers, the platform was available as an open-source project for offensive security.

ARTEX AI became private after it was used in attacks targeting South Korean banks, but several forks of its code are still available.

More recently, CrowdStrike revealed that cyber-espionage group “Vapor Panda” used the pentesting framework in a global campaign targeting 200 organizations.

Previously, the non-profit cybersecurity organization DIVD also revealed that the same framework powered the attacks it suffered last September.

Grinich explained that the investigating team identified user agents such as ‘artex-enrich/1.0’ and ‘norma/0.4’ in web requests from the threat actor.

The founder assured that the cybersecurity incident has now been fully contained and promised to share more information about the attack after the investigation completes.

Uncover email threats your existing defenses may miss.

Adaptive Security's AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.

See what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.

Start your free email security scan.