AI company Fireworks says an unauthorised party reached its development machines through a hacked cloud provider
Reported2 distinct origins, 0 independent.
AI inference company Fireworks said in an advisory on Monday 9 November that a third-party cloud provider hosting its research machines had a security incident on 23 October, and that on 24 October an unauthorised party used it to reach Fireworks development machines and run an unauthorised workload, BleepingComputer reported. Fireworks said resource metadata, billing information and incomplete model weights and datasets of some customers were reached, and that payment card numbers were not, according to BleepingComputer. Fireworks said it had seen no further successful access since 25 October. It named no attacker.
- When
- 24 October 2026
- Where
- United States, the US
- What
- cyber, company
- Attribution
- Not attributed. Fireworks named no attacker; no government or examining company has named one.
- In the record
- Published 2026-11-10 13:50 UTC · changed 1 time since
Sources
- Evidence BleepingComputer
- Evidence The Record
cybercriminals stole billing information and AI-specific data during two breaches last month
- Corroboration BleepingComputer
History
- First recorded 10 Nov, 13:50 UTC, as reported (one origin only).
- 12 Nov, 04:20 UTC: basis for the status changed from one origin only to origins from one side only. Daily record, window 2026-11-12T00Z: a later window added citations or corrected the record; checked again against the one rule
Cite or reuse
The War Record, "AI company Fireworks says an unauthorised party reached its development machines through a hacked cloud provider", record ev-20261110-wrpg, version 2, https://thewarrecord.com/events/ev-20261110-wrpg/