AI company Fireworks says hackers stole data, billing info during October breaches
AI company Fireworks reports data and billing info stolen in two October breaches.
AI infrastructure company Fireworks experienced two data breaches in October, resulting in the theft of customer account and billing information, as well as AI-specific data. The first incident, discovered on October 6, was attributed to a financially motivated cybercriminal group. A second incident on October 23 involved a third-party cloud provider being attacked, which then led to unauthorized access to Fireworks' development machines and further customer data impact. Digital workspace company Notion confirmed some of its customers were impacted by the Fireworks breaches.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Palo Alto Networks?
Get an email when a new story names Palo Alto Networks, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonFireworks AI suffered two separate data breaches in October, with the second stemming from an attack on a third-party cloud provider that cascaded into unauthorized access to Fireworks' own development machines and customer data. This illustrates a critical supply chain risk: an organization's security posture is only as strong as its least-secure vendor or partner. When third-party access is not tightly scoped, monitored, or segmented, attackers can pivot from a compromised supplier directly into a customer's core infrastructure. The theft of billing and AI-specific data amplifies the harm, as customers face both financial and intellectual property exposure.
What helps against this
How we list vendors
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.