Fireworks confirmed two intrusions, with some customer data and unfinished model weights accessed without authorization.

AT A GLANCE

Fireworks confirmed that the two intrusions involved some customer data, and two interviewed customers said they have already moved most of their business out.

Article

AI inference giant Fireworks, with annualized revenue of 1000000000 USD, has been hacked twice in a row, and major customers are starting to consider leaving.

Dongcha Beating AI news, AI inference and model training platform Fireworks has suffered two consecutive hacker intrusions. On November 9, the company admitted that some customers' billing information, datasets, and unfinished model weights had been accessed without authorization. Two customers interviewed by Forbes said they have already moved most of their business away from Fireworks.

The first intrusion occurred in early October. Hackers stole Fireworks' internal credentials and obtained API keys used by some customers for model evaluation. At the time, the company said it had not found that customer models and datasets had been accessed.

On October 24, hackers again entered Fireworks' research and development machines through a compromised third-party cloud service provider, ran unauthorized programs, and further affected customer data.

A customer interviewed by Forbes complained that the hacker attacks Fireworks has suffered are becoming more and more frequent, and communication with customers is also very poor. Some major customers who pay Fireworks millions of USD each year are considering switching suppliers.

Fireworks' annualized revenue had already reached 1000000000 USD in July this year, with a valuation of 17500000000 USD. The company originally planned to launch a new round of financing soon, with a target valuation possibly exceeding 30000000000 USD. Customer loss may put pressure on this financing.

Fireworks said the attackers may be related to black market operations that steal and resell large model usage quotas. At present, no impact has been found on core services such as online inference, and payment card numbers have not been leaked. The company has suspended some data upload and download functions and invited Unit 42, a subsidiary of cybersecurity company Palo Alto Networks, to assist in the investigation.

Original link https://m.theblockbeats.info/flash/376455

Key points

Fireworks has suffered two consecutive hacker intrusions.
On November 9, Fireworks acknowledged that some customers' billing information, datasets, and unfinished model weights had been accessed without authorization.
Two clients interviewed by Forbes said they have already moved most of their business off Fireworks.
The first intrusion occurred in early October, when hackers stole Fireworks internal credentials and obtained some API keys used by customers for model evaluation.
October 24, hackers accessed Fireworks' development machines through a compromised third-party cloud service provider and executed unauthorized programs.
Fireworks stated that core services such as online inference have not been found to be affected so far, and payment card numbers have not been leaked.
Fireworks has suspended some data upload and download functions and has invited Unit 42, a subsidiary of Palo Alto Networks, to assist in the investigation.
The report stated that Fireworks' annualized revenue reached 1000000000 USD in July of this year, with a valuation of 17500000000 USD.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This means the attacker had entered Fireworks' internal or R&D environment and came into contact with some customer data. The company says its core online inference service and payment card numbers were not affected, but some data features have been suspended, and the investigation is still ongoing.

Why it matters to readers

The affected content includes API keys, datasets, and unfinished model weights, which may undermine customer trust in the platform's security. Reports also indicate that some customers have already migrated their business, and several major clients are considering switching suppliers, potentially putting pressure on customer retention and financing plans.

When using third-party AI platforms, attention should be paid to API key management, the scope of sensitive data uploads, vendor security notifications, and backup migration plans; this article does not provide specific measures that ordinary users need to take.

Risks and unknowns

The complete attack path, the number of affected customers, and the scope of data remain to be confirmed by the investigation findings.
It is not yet clear whether the accessed data has been copied, resold, or further exploited.
The overall scale of customer migration and whether other major customers will switch suppliers remain unclear.
Whether the fundraising has been launched, whether the target valuation has been determined, and how much impact the event will cause have not yet been confirmed.

Fireworks confirmed two intrusions, with some customer data and unfinished model weights accessed without authorization.

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center