Fireworks AI says its breach reached customer datasets and incomplete model weights

AI inference provider Fireworks AI has expanded its disclosure of an October security incident. It now says attackers accessed account and billing information and, for a limited set of customers, secrets, datasets and incomplete models. The company first detected unauthorized use of internal credentials on October 6. Its October 9 bulletin said only stored secrets, such as environment variables used in evaluation jobs, were known to have been accessed. In its update, Fireworks says a third-party cloud provider that hosted its research and development machines had a security incident on October 23. On October 24, the attacker used that access to reach Fireworks development machines and run an unauthorized workload, which affected more customer data. Fireworks says it detected the activity the same day and closed known critical vulnerabilities. As of October 25, it had not detected further evidence of attacker activity. The exposed billing data includes billing and shipping addresses, invoice and payment history, and account balances. Fireworks does not store payment card numbers, so none were affected. The company notified law enforcement and is working with Palo Alto Networks Unit 42. It says the evidence points to a financially motivated group that sells stolen access to large language models to illicit routing gateways, a practice known as LLMJacking. Affected customers are receiving account-specific details.