WorkOS says an attacker used ARTEX AI to breach an internal sales app and reach customer contacts and call summaries

TLDR

• WorkOS says an attacker accessed an internal sales application on 30 October and reached contact details and customer-communication summaries.¹
• WorkOS says it found no evidence that its application data or production services were accessed or impacted.¹
• Founder Michael Grinich said the attacker used ARTEX AI; WorkOS's bulletin names only an AI-assisted framework.²⁴

WorkOS, which provides APIs and tools for enterprise authentication, single sign-on and user management, says it identified unauthorised access to an internal application used by its sales team on 30 October 2026.¹² In a security bulletin dated 2 November, the company says its investigation found the use of an AI-assisted offensive security framework to automate reconnaissance and exploitation attempts.¹ The bulletin does not name the tool.⁴ BleepingComputer reports that Grinich said on X that the attacker used the ARTEX AI penetration testing suite.²

WorkOS says the information accessed included business contact details and summaries of customer communications, and that it is still reviewing the records to determine the impact on individual organisations.¹ The bulletin lists names, emails, phone numbers, job titles and company affiliations held in its CRM, along with customer account histories, sales and relationship details, and operational metadata on how customers use WorkOS products.¹ It also lists summaries and excerpts from sales calls, support discussions and customer Slack conversations.¹ BleepingComputer's account of the data omits phone numbers, which the bulletin and SecurityWeek include.¹²³ Cyber Security News notes that these categories describe information available through the application, not a confirmed record-by-record account of what was taken.⁴

WorkOS says there is no evidence that its application data was accessed, and none that production services were accessed or impacted, and that its current analysis points to CRM and customer support data only.¹ It says it disabled external access to the affected application, is reviewing access controls on internal tools and has retained an independent digital forensics and incident response firm.¹ It will contact affected customers directly.¹ BleepingComputer reports that Grinich said the incident is fully contained and that more details will follow once the investigation ends.²

On the tooling, BleepingComputer reports that Grinich said investigators saw the user agents artex-enrich/1.0 and norma/0.4 in the attacker's web requests, and describes ARTEX as released earlier this year by Chinese developers as an open-source offensive security project, later taken private, with several forks still available.² SecurityWeek lists WorkOS among at least a dozen AI developer platforms hit over the past month, says the incidents look unrelated, and reports that WorkOS and Chainstack both disclosed attacks that used ARTEX for automation.³ Cyber Security News says ARTEX behaviour described in other investigations is not a confirmed account of the WorkOS breach.⁴

Why it matters: contact details plus the content of real sales and support conversations can make fraudulent requests look credible, which is why WorkOS tells recipients to watch for phishing and verify unexpected requests.¹