Fireworks AI data breach
Was I affected?
Fireworks AI confirmed a breach affecting an undisclosed number of people, exposing addresses and bank or financial details. Fireworks AI customers it has notified directly by email; Fireworks says customers who did not get a notice have not been identified as affected so far. Some Notion workspaces whose Notion AI chat transcripts were processed through Fireworks are also affected and were contacted by Notion.
| Announced | Nov 9, 2026 |
|---|---|
| When it happened | First incident identified October 6, 2026; second intrusion via a third-party cloud provider on October 23-24, 2026 |
| Country | United States |
| Data exposed | Addresses, Bank or financial details and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Fireworks AI, a San Mateo AI inference and model-training platform, first disclosed on October 9, 2026 that an unauthorized party used internal Fireworks credentials to read environment variables, including API keys and tokens stored as secrets, in a limited number of customer accounts; it found the activity on October 6. In an update on November 9 it said the investigation, carried out with Palo Alto Networks Unit 42, had since found impacts to account and billing information as well. A third-party cloud provider hosting Fireworks R&D machines had a security incident on October 23, and on October 24 the attacker used it to reach Fireworks development machines and run an unauthorized workload. The affected internal application gave access to resource metadata, billing information (billing and shipping addresses, invoice and payment history, account balance and credit usage), and for certain customers a subset of incomplete model weights and datasets. Fireworks says it does not store payment card numbers and found no impact on its zero-data-retention Inference, Training SDK and Nexus products. It links the attack to a financially motivated group selling stolen access to large language models ("LLMJacking"). Fireworks has not said how many customers are affected. Notion, which used Fireworks for its AI Insights feature, says AI chat transcripts from fewer than 1% of Notion workspaces were included.
What should I do?
- If Fireworks notified you, replace any revoked Fireworks API keys and update the applications that use them.
- Rotate or revoke any third-party credentials you stored as Fireworks secrets with the providers that issued them; deleting the stored secret alone does not invalidate them.
- Review your Fireworks account for API keys, users, evaluators, training jobs and datasets you don't recognize, and report them to security-notice@fireworks.ai.
- Be wary of invoices or billing emails that quote your Fireworks account balance or payment history, and confirm any payment request through the Fireworks dashboard.
- If Notion told you your workspace was affected, rotate any passwords, API keys or other credentials pasted into Notion AI chats during the incident period.
More data breaches in the United States →
Check the other services you use →
Sources
- Update on October 2026 security incident · Fireworks AI · official
- Fireworks October 2026 security incident · Fireworks AI · official
- Security incident involving a third-party AI vendor · Notion · official
- Fireworks AI discloses new breach after cloud provider hack · BleepingComputer · news
- AI company Fireworks says hackers stole data, billing info during October breaches · The Record · news