AI inference platform Fireworks reports second breach exposing billing data and some customer model weights and datasets

Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking ^[1]. The company says a third-party cloud provider hosting its R&D machines had a security incident on October 23, which an unauthorized party used on October 24 to reach Fireworks development machines and run an unauthorized workload; exposed data includes resource metadata and billing and shipping addresses, invoices and payment history, while card numbers were not stored and not affected ^[1][2]. Fireworks customers should replace revoked API keys per their notice, rotate listed third-party credentials with their issuers, and check accounts for unrecognized keys, users, training jobs and datasets ^[3].

Industries mainly affected: Technology

Fireworks customers should replace revoked API keys per their notice, rotate listed third-party credentials with their issuers, and check accounts for unrecognized keys, users, training jobs and datasets