2026 Warp — vendor compromise exposed agent traces and user telemetry; about 1% of users estimated affected
Data compromised
Agent decision logs (agent traces) and user telemetry from the agentic development environment. Warp has not said whether source code, prompts, credentials or other sensitive details were included. The CEO estimates roughly 1% of users may have been affected; Warp’s website claims at least 800,000 users.
Technical writeup
Disclosed October 27, 2026. This record relies on BleepingComputer’s account of Warp’s statement; the company post itself was not retrieved. The 1% figure is a CEO estimate, so no record count is given. Warp said it contacted the vendor about the vulnerability. companyConfirmed true.
Root cause
Attackers exploited a vendor in Warp’s infrastructure. Warp’s CEO says the company became aware of an active, narrow-banded exploitation on Friday (October 23, our inference from the October 27 coverage), detected it within hours and has remediated it. The vendor has not been named and the vulnerability has not been described.