Fireworks CEO discloses October breach: third-party cloud access led to customer data impact
lqiao · x · 2026-11-10
Fireworks CEO Lin Qiao published a community update on the October security incident, alongside a detailed security bulletin.
Key facts:
- On Oct 23, a third-party cloud provider hosting Fireworks dev machines suffered a security incident
- On Oct 24, an unauthorized party used that access to reach a Fireworks dev machine, then escalated permissions across multiple hops to assume a cloud service account
- This granted access to a subset of storage systems, causing additional customer data impact
- Fireworks detected the activity the same day and initiated its incident response; remediation was underway as of Oct 25
Full technical details are in the official bulletin on fireworks.ai.
Related event: Fireworks AI hacked: customer data and partial model weights exposed(10 posts)→
More from Infra
- 26 researchers publish 212-page paper on feasibility of a "hardwired pause" of frontier AI — DavidSKrueger · 2026-11-10
- Frontier lab compute shifts hard: pre-training falls from 67% to 7%, post-training/RL now 55% — akbirthko · 2026-11-10
- Study of 1,600 Data Centers Finds Each Adds ~1,000-1,300 Local Jobs Within 3-5 Years — RachelVT42 · 2026-11-10
- rakyll teases Agent Substrate as 'agentic compute fabric' ahead of KubeCon keynote — rakyll · 2026-11-10
- ngrok AI Gateway adds Liquid AI and 160+ LLM API models; tiny LFM3-1.7B pages for a thirsty plant — JosephJacks_ · 2026-11-10
- Together Compiler hits 2.7x throughput gains on Kimi K3 at same per-user speed — togethercompute · 2026-11-10