Fireworks AI says a second breach exposed some customers' incomplete model weights and datasets

Fireworks AI's Nov. 9 update says an unauthorized party used a third-party cloud provider's Oct. 23 incident to reach its development machines on Oct. 24. Accessed: resource metadata, billing details and, for some accounts, secrets, datasets and incomplete model weights. Fireworks links the activity to a financially motivated group that resells tokens from stolen LLM access ("LLMJacking"). Card numbers and zero-retention inference were not affected. Self-serve dataset uploads are paused; Unit 42 is investigating.

HEAT

OUTLETS

14

FIRST SEEN

Nov 9, 2026, 15:46 ET

LAST SIGNAL

6h ago