Fireworks AI discloses breach following cloud provider compromise
Fireworks AI
AI startup Fireworks AI disclosed a security breach where attackers accessed its development machines. The intrusion stemmed from a previous compromise at a third-party cloud provider.
why this severityConfirmed real-world breach impacting a named organisation.
- first report
- 10 Nov 2026
- last update
- 12 Nov 2026
Timeline · 3
- 10 Nov 2026Fireworks AI discloses new breach after cloud provider hack
- 10 Nov 2026Investigation reveals the breach exposed customer billing data, secrets, datasets, and incomplete models for a limited set of accounts
- 11 Nov 2026Breach confirmed to have exposed Notion AI chat transcripts in a small number of workspaces
Sources · 5
News and write-ups
- 2026-11-10Fireworks AI discloses new breach after cloud provider hackBleepingComputer · bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud
- 2026-11-10Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model WeightsThe Hacker News · thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html
- 2026-11-10AI company Fireworks says hackers stole data, billing info during October breachesThe Record · therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks
- 2026-11-11Notion says Fireworks breach exposed customer AI chat transcriptsBleepingComputer · bleepingcomputer.com/news/security/notion-says-fireworks-breach-exposed-customer
- 2026-11-12Notion Customer Data Compromised in Fireworks AI HackSecurityWeek · securityweek.com/notion-customer-data-compromised-in-fireworks-ai-hack
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Other
- severity
- 3 · Confirmed exploitation
- targets
- Framework / tooling
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 10 Nov 2026 · first reported 10 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-11-10 08:11Z · updated 2026-11-12 11:41Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Fireworks AI discloses breach following cloud provider compromise https://gcdradar.vercel.app/incidents/fireworks-ai-discloses-breach-following-cloud-provider-compr · AIR-2026-1850 · live - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed real-world breach impacting a named organisation. - Fix status: No fix needed - First reported: 2026-11-10 - AI role: Attack on AI - Products: Fireworks AI ## Summary AI startup Fireworks AI disclosed a security breach where attackers accessed its development machines. The intrusion stemmed from a previous compromise at a third-party cloud provider. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-11: Breach confirmed to have exposed Notion AI chat transcripts in a small number of workspaces (https://bleepingcomputer.com/news/security/notion-says-fireworks-breach-exposed-customer-ai-chat-transcripts) - 2026-11-10: Investigation reveals the breach exposed customer billing data, secrets, datasets, and incomplete models for a limited set of accounts (https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html) - 2026-11-10: Fireworks AI discloses new breach after cloud provider hack (https://bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack) ## Sources - 2026-11-10 BleepingComputer: Fireworks AI discloses new breach after cloud provider hack https://bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack - 2026-11-10 The Hacker News: Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html - 2026-11-10 The Record: AI company Fireworks says hackers stole data, billing info during October breaches https://therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks - 2026-11-11 BleepingComputer: Notion says Fireworks breach exposed customer AI chat transcripts https://bleepingcomputer.com/news/security/notion-says-fireworks-breach-exposed-customer-ai-chat-transcripts - 2026-11-12 SecurityWeek: Notion Customer Data Compromised in Fireworks AI Hack https://securityweek.com/notion-customer-data-compromised-in-fireworks-ai-hack Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- livePolicySniff: Inferring Agent Policy States through Shared-GPU Execution
Research · since 13 Nov 2026
AI - liveOn Private Knowledge Retrieval and Private Inference for Multi-Agent Systems
Research · since 11 Nov 2026
AI - liveMulti-Agent Debate Systems Social-Bias Vulnerabilities in Multi-Agent Safety Deliberation
Research · since 4 Nov 2026
AI - closedCursor Researchers bypass browser security in AI coding assistants
Research · since 29 Oct 2026
AI - closedClaude Mythos 5 AISI Evaluation Agents Conduct Unsanctioned Real-World Cyber Activity
Research · since 25 Jul 2026
AI - closedLLM agent ecosystems CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems
Research · since 27 Oct 2026
AI