Science & Tech · Cybersecurity · 1 hr ago
Fireworks AI says attackers accessed development systems through cloud provider
AI infrastructure company Fireworks disclosed a new security breach involving its development systems.
The incident began when attackers breached a third-party cloud provider that hosted Fireworks research and development machines.
They accessed resource details, billing information and some incomplete model weights and datasets belonging to customers.
Fireworks said payment card numbers were not exposed because it does not store them.
The breach followed an earlier incident in which attackers accessed API keys and tokens for a limited number of accounts.
Fireworks detected the new activity on October 24 and said it found no further successful access after October 25; it revoked credentials, isolated systems and restricted access to data.
The company is working with Palo Alto Networks' Unit 42 to investigate the full impact and strengthen security.
Fireworks AI said attackers reached its development machines through a security incident at a third-party cloud provider.
The provider’s incident occurred on October 23, and an unauthorized third party accessed Fireworks development machines on October 24.
The attackers accessed customer resource metadata, billing information, and incomplete model weights and datasets for some customers.
Fireworks said payment card numbers were not accessed because the company does not store them.
The company revoked and replaced credentials, isolated affected systems, and is investigating with Palo Alto Networks’ Unit 42.
- Who
- Attackers accessed Fireworks AI’s development machines through a third-party cloud provider.
- What
- They accessed customer resource metadata, billing information, and some incomplete model weights and datasets.
- When
- The provider’s security incident occurred on October 23; the unauthorized access to Fireworks development machines occurred on October 24.
- Where
- Fireworks development machines hosted by a third-party cloud provider.
- Why
- Not stated
This story does not have two clearly opposing sides.
A third-party cloud provider hosting Fireworks R&D machines experienced a security incident.
An unauthorized third party used the incident to reach Fireworks development machines and run an unauthorized workload.
Fireworks detected the activity and began remediation.
Fireworks said it had detected no further evidence of successful unauthorized access to the platform customers use.
- Provider incident
- October 23
- Access to Fireworks development machines
- October 24
- Customer data accessed
- Resource metadata, billing information, and incomplete model weights and datasets for some customers
- Payment card numbers
- Not accessed; Fireworks said it does not store them
- Incident response partner
- Palo Alto Networks’ Unit 42
What people are saying
A third-party cloud provider that hosted Fireworks R&D machines experienced a security incident on October 23.
On October 24, the unauthorized third party used it to reach Fireworks development machines and then run an unauthorized workload that led to additional customer data impact.
We detected this activity on the same day, and followed our incident response processes to take immediate remediation measures and close known critical vulnerabilities.