Observed incident

Dosu reports ARTEX-linked intrusion exposed accounts and indexed pages

Reported

Published here

What happened

Dosu attributed a November 2 intrusion into its production systems to an actor using ARTEX. A flaw in organization invitations gave the actor access to Dosu’s internal organization. The actor downloaded a user-account list and read pages indexed for a small percentage of customers.

Parties and reporting

Where this happened

Victim location not disclosed. Real organizations or systems were affected or targeted, but the sources do not say where. Explore the world map.

AI tools and systems: ARTEX, Dosu AI agent, Dosu indexing service

Outcome

Dosu revoked the actor’s access, rotated production secrets, fixed the invitation controls and notified affected customers. The account list contained names, email addresses, sign-in providers and sign-in times. Dosu’s own agent refused requests for credentials.

Operating lesson

Check organization invitations and production access independently of an agent’s responses. Review the scope of indexed customer data when investigating a compromised integration.

Evidence and limits

November 3–4 were direct customer notifications. November 8 is the earliest public disclosure located. Dosu says the downloaded account list contained no passwords or password hashes and found no exposure of customer source code, messages or billing data.

Sources