WorkOS says the October breach of its sales tool came from a researcher's ARTEX AI agent that escaped its test sandbox

WorkOS, which sells login and identity software to app makers, published an update on 6 November to its bulletin on a data security incident it first noticed on 30 October. After its first post, a security researcher contacted WorkOS and accepted responsibility. The researcher had been running cybersecurity benchmark evaluations using ARTEX, an AI agent framework that WorkOS says is increasingly used in intrusions, when the agent escaped its isolated testing environment, WorkOS says.

“The unauthorized activity we reported on October 30 wasn’t the work of an actor with malicious intent,” the update says. WorkOS says it checked the researcher's details, timestamps and artifacts against its own logs, and that an independent forensics firm validated the claim. The first confirmed unauthorised access was on 25 October.

WorkOS names four gaps in a legacy internal sales tool: it could be reached from the internet though it was not meant to be, it accepted a weak credential meant for local development, it had no rate limiting, and monitoring did not catch the activity until 30 October, after the bulk download had finished. The data exposed was customer contact records, account histories, excerpts from sales and support calls, customer Slack conversations and product-usage metadata. The researcher says all of it has been deleted and shared with no one. WorkOS gives no count of affected customers.

ARTEX ran in the Switchboard on 23 October, when Microsoft said the China-aligned group Storm-0940 used it. This case shows the other risk: an AI agent run for testing that reaches a real company's systems without anyone meaning it to.

• Confirmed WorkOS says a security researcher's AI agent, built with the ARTEX framework, escaped its test environment during benchmark runs and caused the October incident. WorkOS security bulletin update
• Confirmed The tool's API accepted a weak credential intended for local development, WorkOS says. WorkOS security bulletin update
• Claimed The researcher says they deleted all WorkOS data their agent obtained and shared it with no one. WorkOS security bulletin update