Fireworks AI, a popular startup that helps companies run artificial intelligence models, notified customers on Nov 9 of a security breach in which their data was accessed, its second known hack in a matter of weeks.
A Fireworks spokesperson said the company is "actively working with our customers to manage the incident, including Notion, Cursor and others.” Fireworks has over 10,000 customers, including the legal tech firm Harvey, productivity software startup Notion and coding company Cursor, according to its website.
Fireworks said in a blog post that an unauthorised third party breached an external cloud provider that hosts the company’s machines. The breach included tens of thousands of files that contained customer data in some cases, according to a person familiar with the matter. This incident happened on Oct 24, Fireworks said.
In early October, Fireworks AI disclosed a different security incident that involved unauthorised use of internal Fireworks credentials to get access to a number of customer accounts. At the time, the startup said it was investigating the matter and working with a cybersecurity firm "to assist with the incident.”
On Nov 9, Fireworks AI confirmed in the post that its investigation of the early October breach uncovered impacts to customers’ accounts and billing information. In addition, the inquiry found that for a limited set of accounts, the breach impacted "secrets, datasets and incomplete models." The startup said evidence links a cybercriminal threat actor group to the early October incident.
After identifying security issues involving unauthorised access to some of its systems, Fireworks launched an investigation with support from the cybersecurity firm Palo Alto Networks Inc and notified law enforcement, the startup said in a statement. "We take this matter very seriously and are connecting directly with customers to provide appropriate support,” the company added.
Fireworks didn't provide information about who was responsible for the latest incident.
Fireworks’ backers include Nvidia Corp and Advanced Micro Devices Inc. The startup was last valued at US$17.5bil (RM71.31bil) in July and is in discussions for a new round of funding at a valuation between US$30bil (RM122.25bil) and US$40bil (RM163bil), people familiar with the matter said. – Bloomberg
