Fireworks AI says attackers stole billing data and some secrets

What Fireworks confirmed

An October 2026 intrusion gave an attacker access to an internal Fireworks application. Fireworks' November 9 update says the system exposed resource metadata, billing details, invoice and payment history, account balances and credit usage. Payment card numbers are not stored by Fireworks and were not affected, the company said. For a limited set of accounts, secrets, datasets and some incomplete model weights were also accessed.

A second incident

A third-party cloud provider that hosted Fireworks research machines was breached on October 23. Fireworks says the intruder used that provider on October 24 to reach development machines and run an unauthorized workload that exposed more customer data. As of October 25, the company said it had found no further successful access to the platform customers use.

Who may be responsible

Fireworks says the evidence links the activity to a financially motivated group that sells access to large language models obtained through "LLMJacking." The company has not named the group. It has notified law enforcement and is working with Palo Alto Networks Unit 42.

Response

Fireworks says it replaced credentials and service accounts, isolated affected systems and tightened access to data storage. It disabled self-serve dataset uploads and downloads for batch inference and dataset-based training while the investigation continues. Based on current findings, the company says its Inference, Training SDK and Nexus products were not affected.

Notion's customers

Notion said some of its customers were affected and that it disconnected its systems from Fireworks. Notion said Fireworks told it on November 6 that customer data may have been accessed.