AI Inference platform Fireworks hacked again, some customer data leaked
BIBIBI
AT A GLANCE
Fireworks said hackers had accessed some customer datasets and models and that it is cooperating with Unit 42 in the investigation.
Article
AI Inference platform Fireworks hacked again, some customer data leaked
PANews November 10 reported, citing Forbes and several other media outlets, that Nvidia-backed AI inference infrastructure company Fireworks said on Monday that hackers had accessed some customer datasets and models over the past 1 months, with the leaked information involving billing and account information, addresses, payment records, and some unfinished AI models. Fireworks attributed the incident to “LLMjacking” (stealing AI model access rights and reselling them), and is currently cooperating with Unit 42 of Palo Alto Networks in the investigation. The company October initially disclosed that internal credentials had been used without authorization,October 24 and another attack affected its research and development data storage. Fireworks has approximately 10000 enterprise customers, including Uber, Shopify, and Cursor, and this year its July valuation reached 17500000000 USD。
PANews cited Forbes and several other media outlets as reporting that Fireworks said on Monday that hackers had accessed some customer datasets and models over the past 1 months.
02
The leaked information listed in the reports involved billing and account information, addresses, payment records, and some unfinished AI models.
03
Fireworks attributed the incident to “LLMjacking”, meaning stealing AI model access rights and reselling them.
04
Fireworks is cooperating with Unit 42 of Palo Alto Networks in the investigation.
05
Fireworks disclosed in October initially that internal credentials had been used without authorization,October 24 and another attack affected its research and development data storage.
06
The reports described Fireworks as an Nvidia-backed AI inference infrastructure company and said it has approximately 10000 enterprise customers, including Uber, Shopify, and Cursor.
07
The reports claimed that Fireworks’ valuation in July reached 17500000000 USD。
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is a report about a security incident at an AI infrastructure company. In brief, unauthorized parties may have accessed some customer information and unfinished models; the company described the incident as related to “LLMjacking” and has launched an investigation jointly with a security team.
Why it matters to readers
The incident involves customer accounts, payment records, addresses, datasets, and models, and may affect customers’ assessment of the platform’s data and model security. The previously disclosed credential misuse and attack on research and development storage also make the scope of the subsequent investigation worth monitoring.
When using hosted AI models or inference platforms, attention should be paid not only to model performance but also to whether access credentials, billing information, training data, and unfinished models are protected.
Risks and unknowns
The materials do not provide Fireworks’ original announcement or independent technical forensics; the current content is mainly based on media reports.
It remains unclear how many customers were specifically affected, the actual scope of access to each type of data, and whether the data was further exploited.
It remains unclear whether the several incidents were carried out by the same attacker or whether they are directly related.
The materials do not state whether the vulnerability or credential issue has been fully remediated, nor when the investigation will be completed.
Related Developments
Loading event timeline…
The months, Monday, and valuation timing in the original text do not specify a year.
Related concepts
AI inference platform
This term is not in the glossary yet. Browse related concepts in the glossary.
