Top-Secured cyber watch: independent analysis based on the official statement of Fireworks AI and on the press. Top-Secured is not affiliated with this company and will never ask you for your bank details or passwords.
AI infrastructure provider Fireworks AI says attackers took secrets, billing details and, for some customers, datasets and partial model weights during two intrusions in October. Notion, one of its customers, confirms that Notion AI chat transcripts processed by Fireworks were accessed and has cut its ties with the provider.
What happened
On 6 October 2026, Fireworks AI, a platform that runs and fine-tunes AI models for other companies, detected unauthorised use of internal credentials. In a first bulletin on 9 October, it said an intruder had read the environment variables of evaluation jobs in a limited number of customer accounts, capturing API keys and tokens stored there as secrets. Its update of 9 November describes a second episode: on 23 October, a third-party cloud provider hosting Fireworks research machines suffered an incident, and on 24 October the same intruder used it to reach development machines and run an unauthorised workload.
What was taken
According to Fireworks, the stolen data includes secrets, resource metadata, billing information (addresses, invoices, payment history, balances; no card numbers) and, for certain customers, part of their datasets and incomplete model weights. The company has notified law enforcement, called in Palo Alto Networks Unit 42 and links the attack to a financially motivated criminal group that resells access to language models, a practice known as LLMjacking. It gives no number of affected customers.
Notion confirmed on its own site that it was hit through this provider: transcripts of Notion AI conversations used for its Insights feature were accessed, in fewer than 1% of workspaces according to Notion, which stresses that its own systems were not breached. It disconnected Fireworks on 3 November, had its data deleted there and disabled Insights.
What to do now
- If you are a Fireworks customer: replace your API keys and revoke at the source every third-party credential stored on the platform; deleting the stored secret does not invalidate it.
- Review the logs of every service those keys could reach (cloud, Git, databases) since early October.
- Notion users: if a password or key was ever pasted into Notion AI, change it.
- List your AI providers: which data, keys and prompts you send them, and whether you could cut them off within an hour.
Our take
Every AI provider that holds your keys or your data extends your attack surface. Give it short-lived, narrowly scoped credentials, never production secrets, and know in advance how to revoke them all at once.
Sources
- Fireworks AI — October 2026 security incident: update
- Fireworks AI — October 2026 security incident
- Notion — Security incident involving a third-party AI vendor
- The Record — AI company Fireworks says hackers stole data, billing info during October breaches
How we choose, verify and write our analyses →
Stolen logins often start with a phishing message. Received a suspicious message (SMS, WhatsApp, social networks) or email? Check it before you click:
Worried your servers are exposed? Our team audits, patches and monitors Linux and cloud infrastructure 24/7.
Talk to an expert Our managed server services →
