Fireworks AI breach exposed customer data via third-party host
A third-party cloud provider hosting Fireworks AI's research-and-development machines experienced a security incident on October 23, 2026, which attackers subsequently exploited to access Fireworks' development infrastructure and customer data Fireworks AI.
On October 24, 2026, unauthorized attackers used access to the compromised third-party environment to reach Fireworks development machines and execute an unauthorized workload that exposed additional customer information. Fireworks detected the activity the same day and confirmed no further unauthorized access to the customer-facing platform occurred after October 25, 2026 SecurityWeek.
Scope of Exposed Data
The breach affected multiple categories of sensitive information. Exposed data included resource metadata, billing and account information, and—for certain customers—incomplete subsets of model weights and datasets The Record. Fireworks stated that payment-card numbers were not stored in the affected systems and therefore were not compromised.
Notion, a major Fireworks customer, was notified on November 2, 2026 that Notion AI data had been accessed during the incident. Notion's investigation identified that the compromised data included Notion AI chat transcripts used for the Insights feature; fewer than 1% of Notion workspaces were affected SecurityWeek. Most of the exposed transcripts could not be definitively attributed to a specific customer or workspace.
Attack Timeline and Attribution
The incident represents a multi-stage compromise. The initial attack targeted the third-party cloud provider's infrastructure, not Fireworks' systems directly. Attackers then leveraged that foothold to pivot into Fireworks' development environment, where they executed a workload designed to extract customer data.
Fireworks' official statement characterized the sequence as follows: "A third-party cloud provider that hosted Fireworks R&D machines experienced a security incident on October 23. On October 24, the unauthorized third party used it to reach Fireworks development machines and then run an unauthorized workload that led to additional customer data impact" Inc..
Industry Impact
The breach is significant because Fireworks AI is a major infrastructure provider in the AI agent economy, and the incident exposed not only billing data but also incomplete model weights and datasets—components critical to AI development. The involvement of a downstream customer like Notion underscores the supply-chain risk inherent in cloud-hosted AI infrastructure.
The incident highlights vulnerabilities in third-party cloud hosting arrangements and the cascading risks when security lapses at upstream providers compromise downstream customers' data.
