← Back to the board
Issue file · activeTracking since Nov 10 · 9 articles · 6 outlets
Fireworks AI breach exposes customer data at Uber, Notion and Cursor
Tracking: AI model provider breaches and customer data exposurePolicy matter covering security breaches at AI model and inference providers, including attacks through third-party cloud supply chains that expose customer billing and metadata, leaked or partially stolen model weights and datasets, breach disclosure obligations for AI companies, and federal or state requirements for securing AI infrastructure and vendor relationships.
Cyber
Articles · 14 days
- Earliest seen
- Nov 10
- BleepingComputer · Tuesday, Nov 10
- Articles · 30d
- 9
- 1.8 per story
- Outlets
- 6
- Most: BleepingComputer (4)
- Hill · 30d
- 0
- None in 30 days or ahead
- Contracts · 30d
- 0
- No awards or solicitations
- Momentum
- 1.1
- Articles ▲9 vs prior week
Activity
30 days back, 14 ahead · hollow = scheduledWhat's happening
Updated yesterdayFireworks AI has disclosed breaches via a compromised third-party cloud provider that exposed customer billing data, metadata, datasets and partial model weights. Downstream fallout continues: Uber reported stolen driver data, Notion disabled features and reported exposed chat transcripts, and Cursor traced a marketplace compromise to stolen Fireworks credentials. Related incidents at Railway, Apify and Qubole show the same pattern of stolen credentials in vendor chains; the items show no scheduled hearing or deadline.
Latest
YesterdayOur first signal
Hill
No policymaker activity in the window.
Contracts
From news coverageRailway's breach generated roughly $740,000 in fraudulent AI usage charges; no federal awards or budget items appear in the coverage.
Pressure
8 articlesSecurity researchers and analysts such as David Shipley and Frank Dickson frame AI credentials as a prime target and back Railway's disclosure and remediation; Google Threat Intelligence Group flags LLMjacking as a trend.
Who covered it, when
A dot per article · ringed = earliest in our sourcesForces at work
share of articles- Threats & findings8 · 89%A cluster of October–November 2026 incidents shows attackers using stolen credentials and compromised third-party cloud providers to reach AI vendors and their customers, exposing billing data, personal data, secrets and chat transcripts.Fireworks AI · Uber · Notion · Cursor · Railway
- Oversight1 · 11%Fireworks AI disclosed a new breach via a compromised third-party cloud provider that reached its development machines and exposed billing data, metadata and partial model weights.Fireworks AI
In the news
9 articlesYesterdayBleepingComputerCursor confirms security breach led to malicious Claude Code extension YesterdayGizmodoHackers Stole Thousands of Uber Drivers’ Data Through an AI Startup 3d agoTechCrunchEarliestCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts 3d agoBleepingComputerOriginalApify rotates API tokens, prompts 2FA resets after breach 3d agoComputerworldHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges 5d agoThe RecordAI company Fireworks says hackers stole data, billing info during October breaches 5d agoCSO OnlineQubole supply chain attack exposed AWS, Entra ID, and Okta credentials 5d agoBleepingComputerEarliestFireworks AI discloses new breach after cloud provider hack