Hackers Use ARTEX AI to Breach WorkOS and Access Customer Slack Conversations

WorkOS has confirmed unauthorized access to an internal sales application, exposing customer contact information and records of business conversations. The company detected the incident on October 30, 2026, and published a security bulletin on November 2. Its investigation identified an AI-assisted offensive security framework used to automate reconnaissance and exploitation attempts.

Founder and CEO Michael Grinich said the attack involved ARTEX, an AI-powered framework that automates offensive security tasks. His statement on X adds detail to the company’s security bulletin, which describes an AI-assisted framework that automates reconnaissance and exploitation attempts without naming the tool.

The affected application provided access to names, email addresses, phone numbers, job titles, and company affiliations stored in customer relationship management systems. It also contained customer account histories and sales relationship information.

Customer communications included summaries and excerpts from sales calls, support discussions, and customer Slack conversations. Operational metadata covered customers’ use of WorkOS products, including product usage and connection or directory health.

WorkOS Confirms Data Breach

These categories describe information available through the application, not a confirmed record-by-record account of everything accessed.

WorkOS is reviewing affected records to determine the impact on individual organizations. The statement supplied with the disclosure says there is no evidence that WorkOS application data or production services were accessed or impacted. The investigation currently points to CRM and customer support information.

The incident comes amid growing abuse of automated security-testing tools. Google Threat Intelligence Group and Mandiant describe ARTEX as a multi-agent platform that turns broad attacker goals into commands. Its agents can test permissions, map networks, adjust failed commands, and continue through several attack stages with limited human input.

Earlier Cyber Security News coverage of ARTEX agents explains how attackers have used the framework for Active Directory discovery, credential attacks, and lateral movement. These are observations from separate investigations, not confirmed steps in the WorkOS breach.

Wiz research also documented agents downloading application files, discovering internal API routes, and testing authentication controls. Related coverage of ARTEX targeting Microsoft 365 shows how stolen application credentials can support attacks across customer environments. Neither report establishes attribution for WorkOS.

WorkOS disabled external access to the affected application, began reviewing access controls across internal tools, and retained an independent digital forensics and incident response firm. It will contact affected customers directly as findings are verified.

Exposed conversation details could make phishing messages more convincing. WorkOS advises customers to verify unexpected requests before sharing sensitive information or taking action, even when messages reference real colleagues or support discussions.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.