The company, which lets customers train and run AI models, said a third-party cloud provider hosting its research and development machines was compromised on October 23. Attackers used that access the following day to reach Fireworks development systems and run an unauthorized workload. Fireworks suspects links to financially motivated criminals involved in LLMJacking – selling unauthorized access to AI models through illicit gateways.
Fireworks grouped the affected data into three categories: - Resource metadata: Resource identifiers, display names, descriptions, creation times, and more - Billing information: Billing and shipping addresses, invoice and payment histories, account balances, and credit usages. Payment card numbers are not saved and therefore unaffected - Model weights and datasets: For certain customers, a subset of incomplete model weights and datasets were accessed, Fireworks said Lin Qiao, Fireworks co-founder and CEO, said the apparent motive was not stealing model weights in response to concerns raised by Cantina Security CEO Hari Mulackal. "From what we see attackers are not after weights," said Qiao.
