Fireworks AI has disclosed another cyberattack in October and a wider customer data exposure involving billing records, datasets, and incomplete model weights. The company, which lets customers train and run AI models, said a third-party cloud provider hosting its research and development machines was compromised on October 23. Attackers used that access the following day to reach Fireworks development systems and run an unauthorized workload. Fireworks suspects links to financially motivated criminals involved in LLMJacking – selling unauthorized access to AI models through illicit gateways. Fireworks grouped the affected data into three categories: Resource metadata: Resource identifiers, display names, descriptions, creation times, and more Billing information: Billing and shipping addresses, invoice and payment histories, account balances, and credit usages. Payment card numbers are not saved and therefore unaffected Model weights and datasets: For certain customers, a subset of incomplete model weights and datasets were accessed, Fireworks said Lin Qiao, Fireworks co-founder and CEO, said the apparent motive was not stealing model weights in response to concerns raised by Cantina Security CEO Hari Mulackal. "From what we see attackers are not after weights," said Qiao. "Most downloads were partial and stopped." Render founder and CEO Anurag Goel shared a notification from Notion warning that some chats with its AI assistant may have been exposed through the Fireworks incident. "Following an investigation by the Notion security team, we have determined that your workspace, Render, was among the