Fireworks hack exposed customer billing data, secrets and some model weights
harris_edouard · x · 2026-11-10
Fireworks, the highly valued inference provider, updated its security bulletin: the scope of the hack is worse than first disclosed. Beyond initially known stored secrets, account and billing information was affected, and for some customers secrets, datasets, and incomplete model weights were accessed.
- Evidence links the attack to a financially motivated cybercriminal group selling stolen LLM tokens to illicit routing gateways — "LLMJacking," a trend Google Threat Intelligence and Mandiant profiled
- Chain of events: a third-party cloud provider hosting Fireworks R&D machines was breached Oct 23; the attacker reached Fireworks dev machines Oct 24 and ran an unauthorized workload; no further unauthorized access detected after Oct 25
- Affected data: resource metadata, billing information (no payment card numbers stored), and for certain customers incomplete model weights and datasets
- Fireworks notified law enforcement and hired Palo Alto Networks Unit 42; per The Information, customers including Harvey are weighing moving off the platform
Related event: Fireworks AI Hacked: Customer Data and Partial Model Weights Compromised(7 posts)→
More from Infra
- Polymarket odds: 23% chance Anthropic announces bankruptcy by end of 2029 — Polymarket · 2026-11-10
- Benchmark: Agentgateway costs ~$280/yr at 5000 routes, rivals up to 182× more — bibryam · 2026-11-10
- Anthropic signs $3.4B deal to power AI data centers with natural gas generators, bypassing the grid — Polymarket · 2026-11-10
- NVIDIA's Jacob Loewenstein: token efficiency matters more than price sheets when picking models — togethercompute · 2026-11-10
- AI networking market to hit $278.9B by 2027 at 95% CAGR, TrendForce forecasts — Beth_Kindig · 2026-11-10
- Peter Diamandis: Data center backlash is the best thing to happen to AI — PeterDiamandis · 2026-11-10