BleepingComputer reported on 27 October 2026 (US time) that Warp, the developer tool that started as a terminal and became an agentic development environment, has disclosed a breach in which agent decision logs and telemetry data belonging to Warp users were exposed in an attack on a third-party vendor in its infrastructure.

According to BleepingComputer, Warp founder and CEO Zach Lloyd said: "On Friday, we became aware of what we believe to be an active and narrow-banded exploitation of a vendor in Warp's infrastructure", and "We detected the operation within hours and were able to remediate and mitigate the impact." Lloyd estimates that "roughly 1% of Warp users may have been impacted", BleepingComputer reports.

BleepingComputer says agent traces and telemetry were identified as potentially affected data, and that the company did not clarify whether the exposed information included source code, prompts, credentials or other sensitive details.

According to BleepingComputer, Lloyd said analysis suggests the attack was powered by "an agent swarm" relying on "a very sophisticated penetration and escalation technique", and that Warp has contacted the vendor about the vulnerability but no details have been shared.

BleepingComputer also reports that Warp has notified users identified as affected, engaged CrowdStrike to assist with the investigation and informed law enforcement. BleepingComputer does not name the vendor. Wire: BleepingComputer (27 Oct, US time).