AI Inference Platform Fireworks Hacked, Some Customer Data Affected

on November 10, according to an official security announcement from Fireworks, a recent security incident affected customer accounts and billing information, while the keys, datasets, and incomplete model weights of a small number of accounts were also impacted.

Fireworks stated that a third-party cloud provider hosting its R&D machines experienced a security incident on October 23. Attackers leveraged this to gain access to its development machines the following day and execute unauthorized tasks, resulting in additional impact on customer data. The company noted that since October 25, there have been no further instances of attackers successfully accessing the platform used by its customers.

Affected information includes billing addresses, invoices, and payment records. Fireworks clarified that it does not store payment card numbers, so they remain unaffected. The company is investigating the incident with Unit 42, a division of Palo Alto Networks, and has temporarily disabled self-service dataset upload and download features used for batch inference and dataset-based training.