WorkOS

Nov 2026 · Graded Attested · Technology and Software · Beyond the filings

Incident summary

WorkOSNov 2026
Not yet quantified
AAttested
An attacker reached an internal WorkOS sales application, caught on October 30, 2026, and took CRM contacts, account histories, sales-call summaries, support threads, and customer Slack conversations. How they got in, and since when, goes unsaid. The notice itemizes the attacker's AI tooling down to the user agents: a careful description of the burglar's shoes, and silence on the unlocked door. The sales tool had quietly become a transcript of every customer relationship.
Technology and Software
WorkOS says attacker used ARTEX AI to breach internal sales app
Initial attack type not disclosed · Impact data theft confirmed

About this record

This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.

Cite this incident

← The complete Beyond the Filings ledger ← Back to the index