Confirmed by WorkOS: WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information
News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes
Questions about the WorkOS breach
Was WorkOS hacked?
BleepingComputer reported a data breach at WorkOS (United States) on 3 November 2026, and it has been confirmed. How it happened, by the sources: hacking.
What data was exposed in the WorkOS breach?
Health and medical information, Email addresses, Names, Job titles, Company affiliations, Product usage information, Summaries and excerpts from sales calls, Support discussions, Business contact details and Customer account histories, by the notices and reports on this page.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a WorkOS data breach settlement?
No settlement open for claims is on record for WorkOS as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.
Is a letter, email or text about the WorkOS breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to WorkOS’s own site, or check the letter here.
Privacy Unpacked