Fireworks AI disclosed a second breach after a third-party cloud provider was hacked on October 23. Attackers used the compromised cloud environment to reach Fireworks development machines on October 24, where they ran an unauthorized workload and accessed resource metadata, billing details and incomplete model weights and datasets for some customers. The breach did not expose customer payment card numbers because Fireworks does not store them. Fireworks responded by revoking and replacing compromised credentials, restricting network pathways, isolating affected systems and tightening data-storage access. The company is working with Palo Alto Networks’ Unit 42 to secure its systems. Earlier, Fireworks had reported an October incident where attackers stole API keys and tokens, allegedly selling LLM tokens via “LLMJacking.” 1