2026-11-11
Fireworks AI Security Incident (October 2026): Billing Data and Some Datasets and Model Weights Affected, Company Says Cloud Provider Breach Was Involved. What Customers Should Do
Fireworks AI, which provides AI model inference infrastructure, published an update on November 9, 2026 to the security incident it first disclosed on October 9. According to the company, the original incident, found on October 6, was known to involve only Fireworks-stored secrets (such as those used in evaluation jobs); it has since found impact to account and billing information, and, for a limited set of accounts, to secrets, datasets and incomplete model weights. In its account, a third-party cloud provider that hosted its R&D machines experienced a security incident on October 23, and on October 24 an unauthorized third party used it to reach Fireworks development machines and run an unauthorized workload, causing additional customer data impact. The company detected this the same day and, as of October 25, had not detected further evidence of successful unauthorized access to the platform customers use. It says the evidence indicates links to a financially motivated cybercriminal group. Payment card numbers are not stored by the company and were not impacted. No impact has been detected on Inference, Training SDK or Nexus, which are zero data retention by default. Self-serve dataset uploads and downloads are disabled during the investigation. Our view: customers should inventory and rotate what they stored with the platform; operators should keep development environments apart from billing and customer-data systems.