Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats Ravie LakshmananNov 10, 2026Cybercrime / Data Breach Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a "limited set of accounts." In a notice published on October 10, 2026, the company said it detected unauthorized use of internal Fireworks credentials that allowed an unauthorized third-party to access environment variables used in evaluation jobs in a limited number of customer accounts. The activity was detected on October 6, 2026, at 9 a.m. PDT. At that time, the AI infrastructure provider said it only found evidence that environment variables, including API keys and tokens stored as secrets, were captured in certain affected accounts, adding that there were no signs that customer models, datasets, training data, inference traffic, or personal information were accessed. In response to the incident, Fireworks AI took the step of revoking the compromised internal credentials and rotating service account tokens, along with affected Fireworks API keys and keys created by the threat actor. The latest bulletin from the company reveals that the scope of the breach may have been broader than previously thought. The company said attackers reached its development environment via an unnamed third-party cloud provider that hosted Fireworks research and development (R&D) machines on October 23, 2026. "On October 24, the unauthorized third party used it to reach Fireworks development machines and then run an unauthorized workload that led to additional customer data impact," it added. "As of October 25, we have not detected further evidence of successful unauthorized access by the threat actor on the Fireworks platform customers use." The breach is said to have provided access to the following types of information - Resource metadata: Fireworks resource identifiers, display names, descriptions, and creation time Billing information: billing and shipping addresses, invoice and payment history, account balance, and credit usage Model weights and datasets: a subset of incomplete model weights and datasets for certain customers Fireworks AI said payment card numbers are not stored by the company and were not impacted by the security incident. It also said it's alerting customers whose data was impacted. The company also noted that it has implemented security hardening procedures, such as credential revocation and rotation; isolating affected systems to prevent further unauthorized activity and lateral movement; tightening access controls; and improving its logging and monitoring systems. "The evidence indicates links to a cybercriminal threat actor group, which is financially motivated and aimed at selling tokens from unauthorized access to large language models (LLMs) to illicit routing gateways," it said. The activity is assessed to be part of an emerging threat known as LLMjacking, which refers to the act of hijacking a victim's LLM through stolen credentials to fuel a criminal enterprise that thrives on peddling the access to other threat actors, while leaving the legitimate owner to pay the bill. Last week, Google issued a warning that threat actors are increasingly targeting AI infrastructure for LLMjacking in North America, South America, and Asia Pacific across the financial services, retail, technology, and transportation sectors. Popular productivity and note-taking application Notion has disclosed that the security incident targeting Fireworks AI impacted "fewer than 1% of Notion workspaces." In a post shared on Reddit, one user said: "looks like all of us are part of that <1%." While the initial assessment was that the breach allowed the threat actor to access Notion AI synthetic testing data, it has since come to light that it may also have involved potential customer data. "Upon analysis of the new data, we discovered that it included Notion AI chat transcripts used for the Insights feature, which for the vast majority of impacted workspaces were unattributable," it said. "'Unattributable' means the chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results." Notion has also emphasized that no other features across its platform were affected by the incident. The Insights feature has since been disabled as it continues to investigate the breach and the company is no longer serving open-weight models through Fireworks. Affected customers are advised to review the impacted data securely inside their workspace. If those with affected workspaces have pasted sensitive information, passwords, API keys, or other credentials during the attack window, it's recommended to rotate them with immediate effect. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. artificial intelligence, Cloud security, Cybercrime, data breach Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing The Flood is Coming And The Pipes Were Already Full Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Join the Session Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. The 2026 Identity Crisis: Why Your IAM is Only Half the Story Stop driving blind. See the identity blind spots traditional IAM misses. Watch now. The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk