Fireworks AI gets burned twice as customer data exposure widens

Fireworks AI disclosed a second cyberattack in October, widening the known exposure of customer information. Attackers reached development systems after compromising a third-party cloud provider, and the incident may have exposed billing records, resource details, some incomplete model weights and datasets, as well as certain Notion AI chat transcripts.

Fireworks suspects financially motivated criminals involved in selling unauthorised access to AI models, though its CEO said most model downloads were partial and stopped. Payment card numbers were not stored, and Notion said exposed chats lacked separate information linking them to users or workspaces, although conversations could themselves contain identifying details. The company did not say how many customers were affected; it worked with Palo Alto Networks’ Unit 42 to rotate credentials, isolate systems and strengthen access controls. The disclosure expands on an earlier October incident involving internal credentials.