{"schema_version":"0.10.0","id":"LR-2026-0826","record_version":1,"title":"WorkOS internal sales application breached via AI-assisted offensive framework ARTEX","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":59.8,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":7.68,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-04","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"2 independent outlets","original_document":null,"reports_total":2,"reports_independent":2,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-04","history":[{"date":"2026-11-04","from_level":null,"to_level":"confirmed","reason":"2 independent outlets"}]},"sources_hash":"8267a9dd8668195df1fc346559fa9ef5ef351bf05b5ef5c9111930943a0b7a27"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":"ARTEX","tools_granted":[],"permissions_scope":null,"autonomy_level":"supervised-auto","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"automates offensive security tasks","safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-10-30","date_disclosed":"2026-11-02","incident_class":"security_compromise","failure_class":"credential_misuse","agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"WorkOS confirmed unauthorized access to an internal sales application holding customer contact information, account histories and excerpts from sales calls, support discussions and customer Slack conversations. The company detected the incident on October 30, 2026, and published a security bulletin on November 2. Its investigation identified an AI-assisted offensive security framework used to automate reconnaissance and exploitation attempts; CEO Michael Grinich named the tool as ARTEX, an AI-powered framework that automates offensive security tasks. WorkOS said there is no evidence that WorkOS application data or production services were accessed or impacted, and that the investigation currently points to CRM and customer support information. WorkOS disabled external access to the affected application, began reviewing access controls across internal tools, and retained an independent digital forensics and incident response firm.","tags":["ai-assisted-cyberattack","agentic-ai","multi-agent","data-breach","credential-theft","cyberattack"],"date_detected":"2026-10-30","near_miss":null,"root_cause":"unknown","root_cause_detail":null,"failure_class_detail":"The document states that ARTEX agents automate reconnaissance and exploitation and that stolen application credentials can support attacks across customer environments; the specific mechanism used against WorkOS is not stated, so the class is inferred from the described credential-based attack pattern.","responsible_party":"third_party","adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"WorkOS disabled external access to the affected application, began reviewing access controls across internal tools, and retained an independent digital forensics and incident response firm.","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Data of third parties (WorkOS customers) was touched with a bounded scope stated: contact details, account histories and conversation excerpts in an internal sales application, with no confirmed record-by-record account of what was accessed.","harm_class":["privacy","third_party_security"],"affected_description":"names, email addresses, phone numbers, job titles, and company affiliations stored in customer relationship management systems","protected_class_involved":null,"data_categories_exposed":["pii"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://cybersecuritynews.com/workos-data-breach/","publisher":"Cyber Security News","date":"2026-11-03","type":"press","title":"Hackers Use ARTEX AI to Breach WorkOS and Access Customer Slack Conversations","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://gbhackers.com/hackers-use-ai-powered-attack-framework-to-breach-workos/","publisher":"GBHackers News","date":"2026-11-03","type":"press","title":"Hackers Use AI-Powered Attack Framework to Breach WorkOS and Access Customer Data","archived_url":null,"attachment":"fingerprint","independence":"independent"}],"per_field_confidence":{"system.developer":"C","system.harness":"C","system.autonomy_level":"C","system.deployment_context":"D","system.intended_use":"C","event.date_occurred":"C","event.date_disclosed":"C","event.failure_class":"C","event.trigger":"D","event.detection_method":"D","event.summary":"C","event.tags":"C","event.date_detected":"C","event.root_cause":"C","event.responsible_party":"C","event.adversarial_actor":"C","event.remediation":"C","event.incident_class":"C","event.agent_involved":"C","event.failure_class_detail":"C","impact.severity":"C","impact.harm_class":"C","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity_because":"C","context.industry":"C","context.country":"D","context.denominator_available":"D","context.incident_evidence":"C"},"field_citations":{"system.developer":[{"source_index":1,"quote":"Investigators identified an AI-assisted offensive framework, but WorkOS did not name the tool or attribute the intrusion to a particular threat actor."}],"system.harness":[{"source_index":0,"quote":"Founder and CEO Michael Grinich said the attack involved ARTEX, an AI-powered framework that automates offensive security tasks."},{"source_index":0,"quote":"Google Threat Intelligence Group and Mandiant describe ARTEX as a multi-agent platform that turns broad attacker goals into commands."}],"system.autonomy_level":[{"source_index":0,"quote":"Its agents can test permissions, map networks, adjust failed commands, and continue through several attack stages with limited human input."}],"system.intended_use":[{"source_index":0,"quote":"Founder and CEO Michael Grinich said the attack involved ARTEX, an AI-powered framework that automates offensive security tasks."}],"event.date_occurred":[{"source_index":1,"quote":"WorkOS reported unauthorized access to an internal sales application on October 30, 2026."}],"event.date_disclosed":[{"source_index":0,"quote":"The company detected the incident on October 30, 2026, and published a security bulletin on November 2."}],"event.failure_class":[{"source_index":0,"quote":"Related coverage of ARTEX targeting Microsoft 365 shows how stolen application credentials can support attacks across customer environments."}],"event.summary":[{"source_index":0,"quote":"WorkOS has confirmed unauthorized access to an internal sales application, exposing customer contact information and records of business conversations."},{"source_index":0,"quote":"The company detected the incident on October 30, 2026, and published a security bulletin on November 2."},{"source_index":0,"quote":"Its investigation identified an AI-assisted offensive security framework used to automate reconnaissance and exploitation attempts."},{"source_index":0,"quote":"Founder and CEO Michael Grinich said the attack involved ARTEX, an AI-powered framework that automates offensive security tasks."},{"source_index":0,"quote":"The statement supplied with the disclosure says there is no evidence that WorkOS application data or production services were accessed or impacted."},{"source_index":0,"quote":"The investigation currently points to CRM and customer support information."},{"source_index":0,"quote":"WorkOS disabled external access to the affected application, began reviewing access controls across internal tools, and retained an independent digital forensics and incident response firm."}],"event.tags":[{"source_index":0,"quote":"Its investigation identified an AI-assisted offensive security framework used to automate reconnaissance and exploitation attempts."},{"source_index":0,"quote":"Google Threat Intelligence Group and Mandiant describe ARTEX as a multi-agent platform that turns broad attacker goals into commands."},{"source_index":0,"quote":"WorkOS has confirmed unauthorized access to an internal sales application, exposing customer contact information and records of business conversations."},{"source_index":0,"quote":"Earlier Cyber Security News coverage of ARTEX agents explains how attackers have used the framework for Active Directory discovery, credential attacks, and lateral movement."}],"event.date_detected":[{"source_index":0,"quote":"The company detected the incident on October 30, 2026, and published a security bulletin on November 2."}],"event.root_cause":[{"source_index":1,"quote":"The disclosure does not identify the number of affected customers, the initial access mechanism, or the specific vulnerability or credentials involved."}],"event.responsible_party":[{"source_index":0,"quote":"Its investigation identified an AI-assisted offensive security framework used to automate reconnaissance and exploitation attempts."}],"event.adversarial_actor":[{"source_index":0,"quote":"Founder and CEO Michael Grinich said the attack involved ARTEX, an AI-powered framework that automates offensive security tasks."}],"event.remediation":[{"source_index":0,"quote":"WorkOS disabled external access to the affected application, began reviewing access controls across internal tools, and retained an independent digital forensics and incident response firm."}],"event.incident_class":[{"source_index":0,"quote":"WorkOS has confirmed unauthorized access to an internal sales application, exposing customer contact information and records of business conversations."}],"event.agent_involved":[{"source_index":0,"quote":"Its agents can test permissions, map networks, adjust failed commands, and continue through several attack stages with limited human input."}],"event.failure_class_detail":[{"source_index":0,"quote":"Related coverage of ARTEX targeting Microsoft 365 shows how stolen application credentials can support attacks across customer environments."}],"impact.severity":[{"source_index":0,"quote":"The affected application provided access to names, email addresses, phone numbers, job titles, and company affiliations stored in customer relationship management systems."},{"source_index":0,"quote":"These categories describe information available through the application, not a confirmed record-by-record account of everything accessed."}],"impact.harm_class":[{"source_index":0,"quote":"WorkOS has confirmed unauthorized access to an internal sales application, exposing customer contact information and records of business conversations."},{"source_index":0,"quote":"Exposed conversation details could make phishing messages more convincing."}],"impact.affected_description":[{"source_index":0,"quote":"The affected application provided access to names, email addresses, phone numbers, job titles, and company affiliations stored in customer relationship management systems."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"The affected application provided access to names, email addresses, phone numbers, job titles, and company affiliations stored in customer relationship management systems."}],"impact.severity_because":[{"source_index":0,"quote":"These categories describe information available through the application, not a confirmed record-by-record account of everything accessed."}],"context.industry":[{"source_index":0,"quote":"Operational metadata covered customers’ use of WorkOS products, including product usage and connection or directory health."}],"context.incident_evidence":[{"source_index":0,"quote":"WorkOS disabled external access to the affected application, began reviewing access controls across internal tools, and retained an independent digital forensics and incident response firm."}]},"notes_on_gaps":"The document does not state the date the intrusion began, how long the attacker had access, how many records or customers were affected, or any monetary loss. It explicitly says the listed data categories describe what was available through the application, not a confirmed account of what was accessed, so records_exposed and third_parties_affected_count are left null. Detection method is not stated: the document says WorkOS 'detected the incident' but does not say who or what noticed it first. The trigger is not stated. The failure_class is a judgement call: the document does not describe the specific mechanism used against WorkOS, only that ARTEX automates reconnaissance and exploitation and that related coverage shows stolen application credentials supporting attacks; credential_misuse is inferred from that pattern and is grade D. The document explicitly says the ARTEX reports do not establish attribution for WorkOS, so the link between ARTEX and this breach rests on the CEO's statement. Country of the operator is not stated. Severity is set to moderate on the bounded-scope test because no loss figure is given. Extractor proposed values without quotes; dropped: ['context.country', 'context.denominator_available', 'event.detection_method', 'event.root_cause', 'event.trigger', 'system.deployment_context', 'system.developer']. Single secondary source; corroborate before upgrading any field to B. The document does not name the AI framework, model, or threat actor, nor the initial access mechanism, vulnerability, or credentials involved. No dollar loss, record count, or number of affected customers is stated. The article explicitly says the WorkOS disclosure does not establish that ARTEX was used, so ARTEX and the Google/Mandiant and government-system intrusions are context only and are not treated as separate incidents here. failure_class is left null because the agent-mechanism taxonomy describes the offending agent's failure mode, and the document does not describe the attacker framework's behaviour in enough detail to code it; agent_involved is set true because the framework automated reconnaissance and exploitation. date_disclosed is taken from the collector-supplied publication date, not from the document text. Country and industry are not stated. Extractor proposed values without quotes; dropped: ['context.country', 'context.denominator_available', 'context.industry', 'event.date_disclosed', 'event.detection_method', 'event.responsible_party', 'event.trigger', 'impact.reversibility', 'system.autonomy_level', 'system.deployment_context', 'system.intended_use']. Single secondary source; corroborate before upgrading any field to B. [2026-11-04: evidence level set: Confirmed (2 independent outlets)]"},"context":{"industry":"Software / identity and authentication services","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":{"log_completeness":null,"tamper_evidence":null,"timestamp_reliability":null,"investigation_independence":"paid_third_party","redaction_summary":null,"analysis_method":"unknown","prompt_output_retention":null},"regulatory":null,"coverage":null}}