# WorkOS says an AI-driven attacker breached its internal sales tool and accessed CRM and customer-conversation data · pwn.watch > WorkOS, the developer platform that provides enterprise SSO, user management and directory sync APIs to thousands of companies, says it identified unauthorized access to an internal application used by its sales team on Oct 30 2026. In a Nov 2 bulletin it says the attacker accessed business contact details (names, emails, phone numbers, job titles, companies) from its CRM, account and relationship histories, summaries and excerpts from sales calls, support discussions and customer Slack conversations, and operational metadata about customers' product usage and connection or directory health. WorkOS says there is no evidence that WorkOS application data or production services were accessed, and that the attacker used an AI-assisted offensive security framework to automate reconnaissance and exploitation; CEO Michael Grinich later named it as the ARTEX AI framework. WorkOS disabled external access to the app, hired an outside forensics firm and is notifying affected customers directly. Customers have nothing to patch, but should expect targeted phishing that uses the exposed contact and conversation details. Page: https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026 · generated 2026-11-04T12:20:10.542Z ## Status - Severity: medium · status: live · patch: partial - Product: WorkOS (internal sales application, CRM and support data) - Started: 2026-10-30 - Affected: WorkOS customers whose contacts and communications were in its CRM and support systems ## Follow this incident - RSS (one item per update): https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026/feed.xml - JSON Feed: https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026.json - This file: https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026/llms.txt ## Updates (newest first) - 2026-11-03: BleepingComputer reports Grinich named the ARTEX AI penetration-testing suite, with attacker user agents such as artex-enrich/1.0 and norma/0.4, and that WorkOS will share more after its investigation. (https://www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app/) - 2026-11-02: WorkOS publishes a security bulletin listing the data involved (CRM contacts, account histories, sales call and support summaries, customer Slack excerpts, product usage metadata), says it found no evidence application data or production services were touched, and says an AI-assisted offensive security framework automated the attack.. (https://workos.com/security/bulletins/october-30th-2026-data-security-incident) - 2026-10-30: WorkOS identifies unauthorized access to an internal application used by its sales team and disables external access to it. (https://workos.com/security/bulletins/october-30th-2026-data-security-incident) ## Fix brief # Security brief: WorkOS says an AI-driven attacker breached its internal sales tool and accessed CRM and customer-conversation data Source: https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026 · status: live · severity: medium · updated Nov 4, 2026, 09:34 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is WorkOS, the developer platform that provides enterprise SSO, user management and directory sync APIs to thousands of companies, says it identified unauthorized access to an internal application used by its sales team on Oct 30 2026. In a Nov 2 bulletin it says the attacker accessed business contact details (names, emails, phone numbers, job titles, companies) from its CRM, account and relationship histories, summaries and excerpts from sales calls, support discussions and customer Slack conversations, and operational metadata about customers' product usage and connection or directory health. WorkOS says there is no evidence that WorkOS application data or production services were accessed, and that the attacker used an AI-assisted offensive security framework to automate reconnaissance and exploitation; CEO Michael Grinich later named it as the ARTEX AI framework. WorkOS disabled external access to the app, hired an outside forensics firm and is notifying affected customers directly. Customers have nothing to patch, but should expect targeted phishing that uses the exposed contact and conversation details. Severity detail: Business contact data and customer conversation excerpts exposed; WorkOS says no application data or production services were accessed - Product: WorkOS (internal sales application, CRM and support data) ## Affected versions - WorkOS customers whose contacts and communications were in its CRM and support systems ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix No fixed version is listed. Follow the vendor advisory below. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Specific notes WorkOS customers have nothing to patch. Treat unexpected emails or messages that reference your WorkOS account, sales calls or support threads as possible phishing, and confirm requests through known WorkOS contacts. ## Latest updates - Nov 3, 2026: BleepingComputer reports Grinich named the ARTEX AI penetration-testing suite, with attacker user agents such as artex-enrich/1.0 and norma/0.4, and that WorkOS will share more after its investigation. - Nov 2, 2026: WorkOS publishes a security bulletin listing the data involved (CRM contacts, account histories, sales call and support summaries, customer Slack excerpts, product usage metadata), says it found no evidence application data or production services were touched, and says an AI-assisted offensive security framework automated the attack.. - Oct 30, 2026: WorkOS identifies unauthorized access to an internal application used by its sales team and disables external access to it. ## Advisories - [October 30th, 2026 Data Security Incident](https://workos.com/security/bulletins/october-30th-2026-data-security-incident) (WorkOS) ## Write-ups & news - [WorkOS says attacker used ARTEX AI to breach internal sales app](https://www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app/) - [WorkOS reports security breach](https://news.ycombinator.com/item?id=50345712) --- Machine-readable: https://pwn.watch/i/workos-internal-sales-app-breach-artex-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.