Warp tells that a vendor attack exposed agent logs of 1% of users

Warp is a developer tool with a minimum of 800,000 users. It tells that attackers exposed agent decision logs and telemetry data through a third party vendor in its systems. CEO Zach Lloyd estimates that about 1% of users can be affected. Warp found the attack on a Friday and acted in a short time. It told the users it identified, and the investigation continues.

How it works

Warp lets developers tell AI agents to write and test code and to deploy software. The attackers used a weak point at a vendor in its systems. Lloyd tells that the analysis shows “an agent swarm”, which is a group of AI agents that work together, and “a very sophisticated method to go into systems and get more access”.

The numbers

• Warp tells that about 1% of users can be affected.
• A breach at the AI coding tool OpenCode last week affected about 1.4% of users.
• Some OpenCode users had charges of up to $1,700 that they did not make.

Warp gave no proof for the agent swarm claim.

What is not known

Warp did not tell if the data includes source code, prompts, credentials or other sensitive data. It does not name the vendor. The cyber firm CrowdStrike helps with the investigation, and law enforcement knows.

Insight: Attackers go through vendors to reach agent data

In October 2026, Wiz found an actor that used ARTEX against IT and software vendors. ARTEX is a free tool for AI agents. Warp tells that its attack came through a vendor and can have used an agent swarm. Attackers seem to select the supplier because one weak point opens many customers, and agents maybe make each try cheaper. Your group of vendors is part of your attack surface.