Last updated
WorkOS: Cybersecurity Incident
WorkOS disclosed a data security incident detected October 30, 2026, in which an unauthorized actor, reportedly using ARTEX (an AI-assisted autonomous penetration testing framework) from Hong Kong and China IP addresses, accessed an internal API used by sales and marketing tools. The actor reached Salesforce and Snowflake instances holding business contact information, CRM data, marketing contacts and support tickets for WorkOS customers. WorkOS says production services and application data were not accessed and the incident appears localized to CRM and customer support data.
Source: Runtime Wire
- Who
- WorkOS · China
- What happened
- WorkOS disclosed a data security incident detected October 30, 2026, in which an unauthorized actor, reportedly using ARTEX (an AI-assisted autonomous penetration testing framework) from Hong Kong and China IP addresses, accessed an internal API used by sales and marketing tools. The actor reached Salesforce and Snowflake instances holding business contact information, CRM data, marketing contacts and support tickets for WorkOS customers. WorkOS says production services and application data were not accessed and the incident appears localized to CRM and customer support data.
- When
- 2026-11-02
- Source
- Runtime Wire
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For WorkOS in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: MitchelLake's Talent Market Index sits at 104.6 (Hot), up 3.6 on the prior month; Asia hiring signal is running steady (+1.1pts).
WorkOS: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across Asia
Cybersecurity Incident · Asia
Spandana Sphoorty →Microfinance company Spandana Sphoorty reported a cyber fraud that led to unauthorized transactions of Rs 7.8 crore from a bank account, discovered on a Sunday. Services linked to the fraud were halted and investigations are underway.
Cybersecurity Incident · Asia
Videostrong Technology Co. →Google says Shenzhen-based Android manufacturing partner Videostrong secretly built a backdoor into about 1.3 million set-top boxes, turning them into a botnet used for ad fraud, data exfiltration and unauthorized traffic routing. Google dismantled the backdoor, cut ties, and banned the company from building or selling certified Android devices or supplying Android software.
Cybersecurity Incident · Asia
고위드 (Gowid) →Korean corporate card and expense-management fintech Gowid disclosed a breach on 27 Oct 2026. Customer data (contact names, emails, phone numbers, job titles, addresses, masked card numbers, GWS billing details) was exposed, and abnormal recurring charges hit its GWS subscription billing function. The company reported the incident to KISA and blocked the attack path, IP and affected payment function.
Cybersecurity Incident · Asia
Mirae Asset Global Investment →Mirae Asset Global Investment was also named as a victim in the same series of Korean financial-sector breaches, under FSS investigation.
Cybersecurity Incident · Asia
Broadway Photo Supply →Appliance and electronics chain Broadway (Broadway Photo Supply) was named in a Hong Kong privacy regulator investigation into a customer data breach, one of three retailers and airlines affected in the same wave of incidents.
Cybersecurity Incident · Asia
Times Mobility →Times Car operator Times Mobility is affected by a personal data leak; its parent plans to book a one-time loss of ¥5.5 billion related to the incident.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- AI Executive Search →
AI capability is being built into executive stacks, not bolted on beneath them.
- Executive Search: Asia →
Our Asia practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗