· ai-devtools
Fireworks AI gets burned twice as customer data exposure widens
Fireworks AI has disclosed another cyberattack in October and a wider customer data exposure involving billing records, datasets, and incomplete model weights.
The company, which lets customers train and run AI models, said a third-party cloud provider hosting its research and development machines was compromised on October 23. Attackers used that access the following day to reach Fireworks development systems and run an unauthorized workload.
Fireworks suspects links to financially motivated criminals involved in LLMJacking – selling unauthorized access to AI models through illicit gateways. Fireworks grouped the affected data into three categories: - Resource metadata: Resource identifiers, display names, descriptions, creation times, and more - Billing information: Billing and shipping addresses, invoice and payment histories, account balances, and credit usages.
