Fireworks.ai Update on October 2026 security incident

Fireworks.ai said its investigation into the October 2026 incident, assisted by Palo Alto Networks Unit 42, found impacts to account and billing information and, for a limited set of accounts, to secrets, datasets and incomplete models, with evidence linking the activity to a financially motivated group engaged in "LLMJacking." A third-party cloud provider hosting Fireworks R&D machines was breached on October 23, and on October 24 an unauthorized party used it to reach Fireworks development machines and run a workload that led to additional customer data impact; Fireworks detected the activity the same day and says it has not detected further successful unauthorized access since October 25. Fireworks has implemented hardening measures including credential lockdown, network isolation and tightened data access, and has disabled self-serve dataset uploads and downloads for Batch Inference and dataset-based training while Inference, Training SDK and Nexus remain ZDR by default.