Fireworks AI says hackers exposed customer billing data and model weights

Fireworks says a new hack exposed customer billing information, model weights and datasets. The breach comes as the startup, with $1 billion in annualized revenue, prepares a fundraise that could value it at $30 billion or more. Full story:

One more security incident. Hackers used AI to break into an AI company so they could steal access to AI models and sell AI. Welcome to LLMJacking. Fireworks AI just shared the full story of its October incident: Oct 23: a third-party cloud provider that hosted Fireworks dev machines gets breached. Oct 24: the attacker uses that access to reach a Fireworks dev machine, then escalates permissions through multiple hops until they can assume a cloud service account. From there they get into a subset of storage systems. Fireworks detected it the same day. At first, only credentials stored in Fireworks were known to be hit. Now it’s worse: account metadata and billing info (not payment card numbers). For a small number of accounts, credentials, datasets and models were exposed too, though…