Not a law firm.We connect people affected by data breaches with independent attorneys.

Incident information

Are You a WorkOS Customer Contact? Learn About Your Options After the October 2026 Data Breach

Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.

What happened

WorkOS, a San Francisco-based developer platform that provides login, single sign-on and user management tools to software companies, disclosed that on October 30, 2026 it identified unauthorized access to an internal application used by its sales and customer-facing teams. In a security bulletin dated November 2, 2026, the company said the information in the affected application included:

Business contact details: names, email addresses, phone numbers, job titles and company affiliations stored in its customer relationship management (CRM) systems
Customer account histories and sales relationship information
Summaries and excerpts from sales calls, support discussions and customer Slack conversations
Information about customers' use of WorkOS products

BleepingComputer reported that the attacker used an AI-assisted offensive security framework to automate reconnaissance and exploitation. WorkOS says there is no evidence that WorkOS application data or production services were accessed, that it disabled external access to the affected tool, and that it is reviewing the affected records to determine the impact for individual organizations. The company has not said how many people were affected.

If you are, or were, a WorkOS customer or business contact and your information may have been held in WorkOS's sales systems, you can see if you may qualify to connect with an independent attorney.

Possible remedies

Possible remedies, if any, depend on the facts of your situation and applicable law. No outcome or payment is guaranteed.

Official source

Read the original public notice or report about this incident (opens in a new tab):

https://workos.com/security/bulletins/october-30th-2026-data-security-incident

See if you may qualify

Was your contact information held by WorkOS? See if you may qualify to connect with an independent attorney.

First nameLast nameEmail addressPhone (optional)State of residenceBriefly describe how you were affected (optional)

Optional. Please do not include Social Security numbers, dates of birth, account numbers, or medical details.

I agree to the Terms and Privacy Policy and consent to DataBreachRelief.com sharing my information with one or more independent law firms, who may contact me about my potential claim by email or phone. I understand this does not create an attorney-client relationship.Optional: I agree to receive calls/texts, including automated, from DataBreachRelief.com and partner law firms at the number provided. Consent is not a condition of service. Msg & data rates may apply. Reply STOP to opt out.

Thank you. Your information has been received. If a participating law firm is interested in your situation, they may contact you.

Sorry, something went wrong and your information was not sent. Please try again.

DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.