FULL STORY
Fireworks AI Hit by Back-to-Back Hacks
Fireworks AI disclosed a breach compromising customer data and model weights, with CEO Lin Qiao issuing a community update on Nov 10. Bloomberg then reported a second hack within weeks, deepening the security crisis.
2026-11-10 ~ 2026-11-10 · 2 episodes · 13 posts
Episode 1 · Fireworks AI hacked by cybercrime group; customer data and partial model weights exposed (2026-11-10, 11 posts)
Fireworks, a highly valued AI inference provider, has been hacked with customer data exposed. The company confirmed the attack was carried out by a financially motivated cybercrime group, and the scope keeps expanding: beyond the initially disclosed storage keys, account and billing information, secrets, datasets, and even partial model weights of some customers were accessed. Several well-known customers are considering or have decided to move off the platform.
Confirmed
- Fireworks' official security advisory confirmed the breach, with impact beyond the initial disclosure: expanding from storage keys to account and billing information, secrets, datasets, and partial (incomplete) model weights of some customers (@harrisedouard relaying the official advisory)
- The company says the attackers were a financially motivated criminal group (@harrisedouard)
- Per The Information reporter Steph Palazzolo, Fireworks has notified customers including legal AI firm Harvey of the data breach (@stephpalazzolo)
- Per Forbes, sources say some customers are migrating their data out of Fireworks systems (@annatonger)
- Per @nmasc, customers such as Notion and Cursor are working with Fireworks to handle the breach — the company's second security incident in weeks
- One customer described a series of "very serious attacks," criticized Fireworks' poor communication, and decided to leave (@annatonger)
Not Yet Confirmed
- The full scope of the incident and details of the leaked data are still being handled and investigated
- Whether all customers will ultimately migrate remains undecided; so far it is only "considering migration" or partial migration
Why It Matters
- This is a rare security incident directly targeting an AI inference infrastructure provider, exposing supply-chain risks of third-party inference hosting around secrets, datasets, and model weight protection
- Access to model weights (even partial, incomplete ones) is a serious signal for Fireworks — whose business centers on open-source model hosting — and its customers
- A second security incident within weeks, coupled with poor communication, could accelerate customer churn and shake market confidence in independent inference providers
- Fireworks AI hacked: customer data and models compromised, customers flee — annatonger · 2026-11-10
- Cybercriminals Hack AI Inference Provider Fireworks, Customer Data and Models Affected — annatonger · 2026-11-10
- Fireworks, top-valued inference provider, hit by hack exposing customer data; clients eye exit — steph_palazzolo · 2026-11-10
- Fireworks hack exposed customer billing data, secrets and some model weights — harris_edouard · 2026-11-10
- Fireworks AI hit by second breach in weeks, customer data of Notion and Cursor compromised — nmasc_ · 2026-11-10
- Fireworks AI reportedly hacked, with model weights and datasets said to be stolen — pzakin · 2026-11-10
- Fireworks AI says hackers accessed customer datasets, partial model weights, and billing info over the past month — annatonger · 2026-11-10
- Fireworks hack exposed customer billing data, model weights and datasets amid $30B fundraise — cedric_chee · 2026-11-10
- AI infra provider Fireworks hacked; customer data and AI models impacted, some customers fleeing — AccBalanced · 2026-11-10
- Fireworks CEO discloses October breach: third-party cloud access led to customer data impact — lqiao · 2026-11-10
- Fireworks breached twice: $17.5B AI firm admits customer datasets, in-training models accessed — ccerrato147 · 2026-11-10
Episode 2 · Fireworks AI Hit by Second Breach in Weeks (2026-11-10, 2 posts)
Fireworks AI, an Nvidia-backed inference provider, is notifying customers of its second breach within weeks, affecting clients including Notion and Cursor, Bloomberg reports.
- Nvidia-backed Fireworks AI notifies customers of its second hack in weeks, Bloomberg reports — demian_ai · 2026-11-10
- Nvidia-backed Fireworks AI hit by second hack in weeks, Notion and Cursor affected — dinabass · 2026-11-10