Update on October 2026 security incident

Fireworks updated its October 9, 2026 security bulletin after an October 23 incident at a third-party cloud provider enabled unauthorized access to Fireworks development machines and an unauthorized workload that affected additional customer data. Working with Palo Alto Networks Unit 42 and law enforcement, the company linked the activity to a financially motivated group associated with “LLMJacking,” in which stolen access tokens are sold to illicit LLM routing services. Beyond previously identified stored secrets, the investigation found that affected internal systems exposed resource metadata, account and billing information, and, for a limited number of customers, secrets, datasets, and incomplete model weights; payment card numbers were not stored or affected. Fireworks said its Inference, Training SDK, and Nexus services were not impacted and use zero data retention by default, while it has notified affected customers, revoked and replaced credentials, restricted network pathways, strengthened data-access controls and monitoring, and temporarily disabled self-service dataset uploads and downloads for Batch Inference and dataset-based training.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.