WorkOS reports security breach

WorkOS reported a data security incident on October 30, 2026, where an unauthorized actor gained access to their internal API through an AI-assisted penetration testing framework called ARTEX. The actor accessed data from WorkOS's Salesforce and Snowflake instances, which contained business contact information, account and commercial information, and other CRM details for customers. The incident was localized to CRM and customer support data, but WorkOS has no evidence that application data was accessed or that any production services were impacted. The investigation is ongoing.