# Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights

Source: [The Hacker News](https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html) · 2026-11-10 · Security
Page: https://themorning.dev/story/fireworks-ai-breach-widens-to-expose-customer-billing-data-and-incomplete-model-7646e96e2e7b5496
Kind: security · Impact: high

## In brief

- Fireworks AI says attackers breached its development machines after compromising a third-party cloud provider that hosted its research and development work.
- Hackers accessed account and billing information, secrets, datasets and incomplete model weights for a limited set of customer accounts, all of which were notified.
- This is the second known Fireworks hack in a matter of weeks; the original incident was first reported in early October.

## Why it matters

If you use Fireworks AI, data you sent or stored there, including datasets, secrets and billing details, may have been accessed, so you should check whether your account was affected and rotate any credentials kept on the platform.

## What to do

- Check whether your account was among those notified by Fireworks AI.
- Rotate any API keys or secrets stored with Fireworks AI.

## Timeline

- 2026-11-09: Fireworks AI notifies customers of the breach affecting data and billing information
- 2026-11-10: Fireworks AI discloses that the investigation uncovered further malicious activity, widening the breach

## What developers say

Commenters are largely critical. Many say Fireworks' zero-data-retention claims conflict with the data that was stored, and they question Notion's description of its exposed chat transcripts as unattributable. Some find the vague "may have been accessed" wording inadequate for compliance duties, while a few welcome the official bulletins as a start. (sentiment: negative)

> This is astonishing. — _fw, Hacker News

> the whole incident response post feels like a huge cop-out. — alentodorov, Hacker News

> I need to do some GDPR notations bc of them but I won't start running around just bc it "may have been" accessed — RamblingCTO, Hacker News

## Coverage

- [AI company Fireworks says hackers stole data, billing info during October breaches](https://therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks) — The Record from Recorded Future News, 2026-11-10
- [Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights](https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html) — The Hacker News, 2026-11-10
- [Fireworks AI gets burned twice as customer data exposure widens](https://www.theregister.com/cyber-crime/2026/11/10/fireworks-ai-gets-burned-twice-as-customer-data-exposure-widens/5308722) — www.theregister.com - Articles, 2026-11-10
- [Fireworks AI discloses new breach after cloud provider hack](https://www.bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack/) — BleepingComputer, 2026-11-10
- [Fireworks AI security breach impacts Notion and their customers](https://www.notion.com/help/security-incident-involving-a-third-party-ai-vendor) — Hacker News: Front Page, 2026-11-10
- [AI infrastructure provider Fireworks says hackers accessed some customers' datasets, incomplete model weights, and billing information over the past month (Anna Tong/Forbes)](https://www.techmeme.com/261109/p42#a261109p42) — Techmeme, 2026-11-09
- [Nvidia-Backed Fireworks AI Notifies Customers of Its Second Hack in Weeks](https://www.bloomberg.com/news/articles/2026-11-09/nvidia-backed-fireworks-ai-notifies-customers-of-its-second-hack-in-weeks) — Bloomberg Technology, 2026-11-09

## Discussions

- [Hacker News](https://news.ycombinator.com/item?id=50437106): 140 points, 49 comments

Tags: security, data-breach, supply-chain, ai-infrastructure, third-party-risk

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev