Checked fact 469113 Nov 2026Safety and security
Fireworks' first bulletin advises affected customers to replace revoked Fireworks API keys and to rotate third-party credentials with the providers that issued them, because removing a stored secret does not invalidate the underlying credential.
The exact words it rests on
Rotate or revoke them with the providers that issued them, then update the applications and Fireworks secrets that use them. Removing a stored secret alone does not invalidate the underlying credential.
What the source said when we opened it, on 13 Nov 2026.
The source
Fireworks October 2026 security incident (bulletin, last updated 10 October 2026)
Checked
Checked by the notis newsroom on , against the source above.
In the story
Notion says Fireworks AI breach affected under 1% of its workspaces 13 Nov 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.