Fireworks AI discloses another breach after cloud provider hack

AI infrastructure startup Fireworks has disclosed another security incident after attackers used a breach at a third-party cloud provider to access the company’s development machines.

Fireworks said the cloud provider hosting its research and development machines experienced a security incident on October 23. The next day, an unauthorized party used that access to reach Fireworks development machines and run an unauthorized workload that affected customer data. The company said it detected the activity on October 24 and took remediation measures.

The attackers accessed resource metadata, billing information, and incomplete model weights and datasets for some customers. Fireworks said payment card numbers were not exposed because the company does not store them. It also said that, as of October 25, it had found no further evidence of successful unauthorized access to the platform used by customers.

This incident followed an earlier security incident disclosed in early October, when attackers accessed environment variables containing API keys and tokens for a limited number of accounts. Fireworks said it has since revoked and replaced credentials and service accounts, restricted unauthorized network pathways, isolated affected systems, and tightened access to data storage and analytics systems.

The company is working with Palo Alto Networks’ Unit 42 incident response division to secure its systems and investigate the incident’s full scope and impact.