AI firm Fireworks says hackers stole billing data and AI secrets in October breaches

AI infrastructure provider Fireworks disclosed that financially motivated hackers breached its systems twice in October, stealing billing information, payment history, and 'secrets'—confidential digital keys that grant access to systems and data. The attacks, investigated by Palo Alto Networks Unit 42, involved a primary breach on October 6 affecting a limited number of customer accounts, and a second incident on October 23 where hackers used a compromised third-party cloud provider to access Fireworks' development machines and run unauthorized workloads.

The breaches led to the theft of AI-specific datasets and internal data, prompting Fireworks to revoke compromised credentials and harden its security posture. Digital workspace company Notion—which used Fireworks for AI classification and inference—disconnected its systems, deleted data, and disabled its 'Insights' feature pending investigation. The incidents highlight growing risks as AI infrastructure becomes a lucrative target for cybercriminals seeking both financial data and proprietary AI assets.