Wrap.dev Breached

Warp founder Zach Lloyd disclosed an intrusion involving a vendor in the company’s infrastructure, detected on Friday. He said Warp identified the activity within hours, took steps to remediate the vulnerability and limit its effects, and contacted the vendor responsible. The attack was described as a sophisticated operation involving an “agent swarm” that penetrated systems and escalated access, apparently beginning with a weakness in a vendor dependency. The intruders accessed a limited amount of agent trace and telemetry data; the disclosure does not specify what particular records were exposed or whether other kinds of information were accessed.

Warp estimated that up to about 1% of its users may have been affected, and said it had notified people it could positively identify as impacted. The company is working with CrowdStrike on a broader investigation and has also contacted law enforcement. Affected users will receive instructions about any actions they need to take, and Warp said it would share further updates as the investigation develops. Lloyd apologized, emphasizing that users entrust Warp with sensitive information and that the company takes that responsibility seriously.