FULL STORY

Fireworks AI Hit by Back-to-Back Hacks

Fireworks AI disclosed a breach compromising customer data and model weights, with CEO Lin Qiao issuing a community update on Nov 10. Bloomberg then reported a second hack within weeks, deepening the security crisis.

2026-11-10 ~ 2026-11-10 · 2 episodes · 13 posts

Episode 1 · Fireworks AI hacked by cybercrime group; customer data and partial model weights exposed (2026-11-10, 11 posts)

Fireworks, a highly valued AI inference provider, has been hacked with customer data exposed. The company confirmed the attack was carried out by a financially motivated cybercrime group, and the scope keeps expanding: beyond the initially disclosed storage keys, account and billing information, secrets, datasets, and even partial model weights of some customers were accessed. Several well-known customers are considering or have decided to move off the platform.

Confirmed

  • Fireworks' official security advisory confirmed the breach, with impact beyond the initial disclosure: expanding from storage keys to account and billing information, secrets, datasets, and partial (incomplete) model weights of some customers (@harrisedouard relaying the official advisory)
  • The company says the attackers were a financially motivated criminal group (@harrisedouard)
  • Per The Information reporter Steph Palazzolo, Fireworks has notified customers including legal AI firm Harvey of the data breach (@stephpalazzolo)
  • Per Forbes, sources say some customers are migrating their data out of Fireworks systems (@annatonger)
  • Per @nmasc, customers such as Notion and Cursor are working with Fireworks to handle the breach — the company's second security incident in weeks
  • One customer described a series of "very serious attacks," criticized Fireworks' poor communication, and decided to leave (@annatonger)

Not Yet Confirmed

  • The full scope of the incident and details of the leaked data are still being handled and investigated
  • Whether all customers will ultimately migrate remains undecided; so far it is only "considering migration" or partial migration

Why It Matters

  • This is a rare security incident directly targeting an AI inference infrastructure provider, exposing supply-chain risks of third-party inference hosting around secrets, datasets, and model weight protection
  • Access to model weights (even partial, incomplete ones) is a serious signal for Fireworks — whose business centers on open-source model hosting — and its customers
  • A second security incident within weeks, coupled with poor communication, could accelerate customer churn and shake market confidence in independent inference providers

Episode 2 · Fireworks AI Hit by Second Breach in Weeks (2026-11-10, 2 posts)

Fireworks AI, an Nvidia-backed inference provider, is notifying customers of its second breach within weeks, affecting clients including Notion and Cursor, Bloomberg reports.