Fireworks AI gets burned twice as customer data exposure widens

Fireworks AI disclosed a second October cyberattack, reporting that a compromised third-party cloud provider hosting its research and development machines on October 23 gave attackers access to Fireworks development systems the following day, where they ran an unauthorized workload. The company said the incident exposed customer resource metadata, billing and shipping addresses, invoice and payment histories, account balances and credit usages, plus a subset of incomplete model weights and datasets for certain customers; payment card numbers were not stored and were unaffected. Fireworks co-founder and CEO Lin Qiao said "From what we see attackers are not after weights" and that "Most downloads were partial and stopped," while Notion notified Render CEO Anurag Goel that Render was among the under 1 percent of Notion workspaces that may have been affected, with some unattributable Notion AI chat sessions possibly exposed.

Fireworks AI gets burned twice as customer data exposure widens The Register https://www.theregister.com Inference biz pins latest breach on cloud provider and LLMJacking miscreants Fireworks AI has disclosed another cyberattack in October and a wider customer data exposure involving billing records, datasets, and incomplete model weights. The company, which lets customers train and run AI models, said https://fireworks.ai/security/bulletins/october-2026-security-incident-update a third-party cloud provider hosting its research and development machines was compromised on October 23. Attackers used that access the following day to reach Fireworks development systems and run an unauthorized workload. Fireworks suspects links to financially motivated criminals involved in LLMJacking https://www.theregister.com/security/2026/11/02/token-thieves-costing-companies-100k-per-day-in-illicit-llm-charges/5306967 – selling unauthorized access to AI models through illicit gateways. Fireworks grouped the affected data into three categories: - Resource metadata: Resource identifiers, display names, descriptions, creation times, and more - Billing information: Billing and shipping addresses, invoice and payment histories, account balances, and credit usages. Payment card numbers are not saved and therefore unaffected - Model weights and datasets: For certain customers, a subset of incomplete model weights and datasets were accessed, Fireworks said Lin Qiao, Fireworks co-founder and CEO, said the apparent motive was not stealing model weights in response to concerns raised by Cantina Security CEO Hari Mulackal. "From what we see attackers are not after weights," said https://x.com/lqiao/status/2119996096512774241 Qiao. "Most downloads were partial and stopped." Render founder and CEO Anurag Goel shared a notification from Notion https://x.com/anuraggoel/status/2120009813983924318 warning that some chats with its AI assistant may have been exposed through the Fireworks https://www.theregister.com/ai-and-ml/2026/11/07/fireworks-says-youre-wasting-money-on-ai-unless-youre-using-all-the-models/5308277 incident. "Following an investigation by the Notion security team, we have determined that your workspace, Render, was among the <1 percent of Notion workspaces that may have been affected by the Fireworks security incident," the email sent to Goel stated. "Some unattributable chat sessions with Notion AI may have been exposed in this incident." Notion said the exposed transcripts lacked separate information linking them to particular users or workspaces. As Reddit users pointed out https://www.reddit.com/r/Notion/comments/1xsddi7/comment/19sesv7ptfhgj/ , however, the conversations themselves could contain identifying details. "Beyond what's in the chat transcript itself, there's no information tying the chat back to your workspace, users, or company," the email added. "No other data from within your workspace is affected." Bloomberg reports https://www.bloomberg.com/news/articles/2026-11-09/nvidia-backed-fireworks-ai-notifies-customers-of-its-second-hack-in-weeks that Fireworks is also working with customers including Cursor https://www.machinebrief.com/compare/github-copilot-vs-cursor and Harvey to assess the impact. Fireworks' update confirmed that it worked with Palo Alto Networks' Unit 42 team to remediate the attack, which included rotating credentials, isolating affected systems from the network, and tightening up data storage access and monitoring systems. The update did not state how many customers were affected by either of the two attacks in October. Fireworks first disclosed an incident on October 9 https://fireworks.ai/security/bulletins/october-2026-security-incident after detecting unauthorized use of internal credentials on October 6. Attackers accessed environment variables in evaluation https://www.machinebrief.com/glossary/evaluation jobs, including API keys and tokens belonging to some customers. At the time, Fireworks said it had found no evidence of access to models, datasets, training https://www.machinebrief.com/glossary/training data, inference https://www.machinebrief.com/glossary/inference traffic, or personal information. Monday's update substantially broadens the disclosed impact. ® Get AI news in your inbox Daily digest of what matters in AI.