Fireworks AI Breach Exposes Customer Data and Billing Information

• •Attackers accessed billing information and datasets for a limited number of Fireworks customers.
• •The breach was traced back to a compromised third-party cloud provider on October 23, 2026.
• •Fireworks has engaged cybersecurity experts for forensic analysis and has implemented security enhancements.

Fireworks AI disclosed a security breach on November 9, 2026, revealing that attackers accessed account and billing information, as well as datasets and incomplete model weights for a limited number of customers. The breach originated from a third-party cloud provider that was compromised on October 23, 2026, allowing unauthorized access to Fireworks' development machines the following day. Initial reports indicated only the exposure of internal credentials, but further investigation uncovered broader impacts, including account metadata and billing details. Fireworks has since engaged Palo Alto Networks Unit 42 for forensic analysis and has implemented security measures to mitigate future risks. Customers affected by the breach have been notified, and self-serve dataset operations have been temporarily disabled. Payment card information was not compromised as Fireworks does not store such data. The incident is linked to a financially motivated cybercriminal group involved in LLMJacking.