WorkOS reports security breach

WorkOS detected a security breach on October 30, 2026, involving unauthorized access to an internal API through an AI-assisted penetration testing framework (ARTEX) originating from Hong Kong and China. The attackers accessed internal business systems containing CRM data, customer contact information, and support tickets, but WorkOS states that no production customer application data or platform services were compromised. The company has contained the incident and brought in independent security experts to investigate.