On 10 November, the Ukrainian news agency UNN, citing Bloomberg, reported that Fireworks AI had disclosed its second large-scale cyberattack in a few weeks.

Fireworks AI is a US start-up whose service lets companies deploy AI models. Its investors include Nvidia and AMD, and it has more than 10,000 customers.

The latest incident took place on 24 October, Bloomberg’s sources said. An unidentified third party broke into the systems of the cloud provider that hosts Fireworks AI’s servers. The attackers gained access to tens of thousands of files, some of which contained customer data. UNN’s headline puts the number of files at thousands.

Fireworks AI has notified affected customers. The company says it is working with Notion, Cursor and other partners to limit the consequences of the attack. The attackers behind the latest breach have not yet been identified.

The company disclosed the previous incident in early October. In that case, the attackers used Fireworks AI’s internal credentials to access customer accounts. A subsequent investigation found that they had gained access to payment information and, in some cases, to confidential data, datasets and partly finished AI models.

Fireworks AI has brought in security specialists from Palo Alto Networks to help with the investigation and has notified law enforcement agencies.

The company was valued at $17.5 billion in July. Bloomberg reported that it is negotiating a funding round that could raise its valuation to $30–40 billion.