[Single source] Fireworks AI breach hit Notion customer data, disclosure says

A post on Reddit's r/pwnhub claims that Fireworks AI, a company that runs AI models for other businesses, suffered a second security intrusion, and that this one reached further than the first into datasets and model weights, the learned parameters that define how an AI model behaves. Nothing in the available evidence confirms the claim yet.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

The evidence behind this item is a single Reddit submission: a headline, an author, and a timestamp. There is no statement from Fireworks and no independent reporting in the batch, so every substantive detail below rests on that one post.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

On November 10, 2026, Reddit user VectorWireAI submitted a post titled "Fireworks AI breach widens to datasets and model weights after second intrusion" to r/pwnhub, a community focused on breaches and security incidents.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

According to the post's title, this was not the first break-in: an earlier breach at Fireworks AI is said to have been widened by a second intrusion, extending the intruder's reach to datasets and to model weights.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

For an inference provider, datasets and model weights are close to the crown jewels. Datasets can hold proprietary or customer information, and weights embody the expensive result of training. If the claim is accurate, the exposure would go past leaked credentials or logs into the substance of the service itself.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

A second intrusion, if it happened, would also suggest the intruder kept a foothold between incidents or found a way back in, which usually raises the stakes for every customer connected to the platform. That reading is an inference from the headline, not an established fact.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

For now, treat the report as unconfirmed and watch for an official Fireworks statement or coverage with direct sourcing. Customers who rely on Fireworks can use the moment for routine hygiene: rotate API keys, review which integrations hold access, and check logs for anything unexpected. None of that presumes compromise; it is cheap insurance while the picture is unclear.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

What the evidence establishes is narrow: a Reddit submission exists, it was posted to r/pwnhub by VectorWireAI, and its headline asserts a widened breach at Fireworks AI.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

What remains unknown is nearly everything else: whether a second intrusion actually occurred, what the first incident was, which datasets and whose model weights are involved, how far access reached, whether Fireworks has detected or confirmed anything, and what the post's claim is based on.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

The only voice in this batch is VectorWireAI, the Reddit user who submitted the post. r/pwnhub exists to discuss breaches and security incidents, so the claim landed in front of a security-minded crowd, but the submission stub shows only link and comment placeholders, and the thread's contents are not part of the evidence.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

The headline implies a two-step story: an initial breach at Fireworks AI, then a second intrusion that broadened access to datasets and model weights. This batch adds nothing about the earlier incident, so the timeline exists only as the post frames it.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

1 independent groups, 1 updates, and 0 engagements. Observed communities: r/pwnhub.

The only technical content in the claim is the class of assets said to be reached: datasets and model weights. No attack path, no indicators of compromise, no timing detail, and no forensic evidence appear anywhere in the submission.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

The evidence base is a single item: Reddit submission reddit:1xscole by VectorWireAI in r/pwnhub, timestamped November 10, 2026, consisting of a headline and a submission stub with no body text.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list

On its own, that is a discussion-tier, single-source claim with no primary confirmation. It is enough to justify attention, not enough to state that any intrusion occurred.[1]Fireworks AI breach widens to datasets and model weights after second intrusionreddit.com · VectorWireAI · r/pwnhub · redditOpen original sourceSee in source list