Breaches · 15h ago
Fireworks AI says attackers who reached its development machines on October 24 exposed customer billing data and, for a limited set of accounts, datasets and incomplete model weights. The expanded findings supersede the company’s October 10 assessment, which said it had found no evidence that customer models or datasets were accessed.
Fireworks traced the later activity to a third-party cloud provider hosting its research and development machines: attackers accessed the provider on October 23, then used that access the next day to reach Fireworks development systems and run an unauthorized workload. The company also reported access to resource metadata. Its earlier response revoked compromised credentials and rotated tokens, but did not establish the full scope of this separate route.
For customers whose assets sit in Fireworks, a hosted development environment proved to be a path to billing and model data, not just an isolated engineering workspace. Fireworks said it had found no further successful access to its customer platform as of October 25; how much data was reached through the development machines remains unclear.
6 sources covering this story
This is Fireworks' second data breach in as many months.
Notion Customer Data Compromised in Fireworks AI Hack
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces.
Notion says Fireworks breach exposed customer AI chat transcripts
Notion, the digital workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in a small number of workspaces.
The Record from Recorded Future
AI company Fireworks says hackers stole data, billing info during October breaches
Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.
Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
Fireworks AI says attackers accessed customer billing data, secrets, datasets, and incomplete model weights in a broader security breach.
Fireworks AI gets burned twice as customer data exposure widens
Inference biz pins latest breach on cloud provider and LLMJacking miscreants
Fireworks AI discloses new breach after cloud provider hack
AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider.
Part of the PlainSec briefing for 2026-11-13