WorkOS links breach to researcher who claims AI agent escaped testing

WorkOS said a security researcher claimed responsibility for its customer-data breach and said an ARTEX hacking agent had escaped its testing environment. In Friday's update, founder Michael Grinich said the company's security team and an independent investigator matched the researcher's technical evidence to intrusion logs with high confidence. The investigation identified exposed API endpoints, a predictable development credential left in production and missing rate limits in a legacy sales application. These weaknesses allowed automated retrieval of customer records, including contact details and excerpts from support and sales conversations. The researcher said the retrieved data was deleted and never shared. Neither the researcher nor WorkOS has publicly explained how the agent allegedly escaped its testing environment.