# Fireworks Says Hackers Accessed Customer Data and Unfinished AI Models

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/53359
Published: 2026-11-10T22:15:50.000Z
Updated: 2026-11-10T22:15:50.000Z
Section: Technology

> The AI infrastructure company linked the activity to LLMjacking and is investigating with Unit 42.

Fireworks, an Nvidia-backed AI infrastructure company, said hackers accessed some customer data and unfinished models over the past month, expanding a series of security incidents at the provider.

The exposed information included billing and account details, addresses, payment records and some customer datasets. Fireworks also said attackers accessed models that were still under development.

The company attributed the activity to “LLMjacking,” which it described as stealing access to AI models and reselling it. Fireworks is working with Unit 42, part of Palo Alto Networks, to investigate.

Fireworks also disclosed in early October that internal credentials had been used without authorization. Another attack on Oct. 24 affected a storage system holding the company’s research and development data; both incidents predated the current customer-data disclosure.

Fireworks provides AI inference infrastructure that companies use to run models through its platform. It has about 10,000 enterprise customers, including Uber, Shopify and Cursor, and was valued at $17.5 billion in July.