{
  "type": "bundle",
  "id": "bundle--948e77b9-5d4a-5a93-81c6-5f687cdc3a44",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--eefed54b-4fcd-5511-8508-868d19a0907a",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "org:dfd5c21a-f0f8-4bb7-a280-fa92d0abeabd",
      "name": "Fireworks AI",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--f1149548-6c2e-55e1-81dd-e28be795e284",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "org:441c42c0-7963-42d3-a039-31204086ed60",
      "name": "Notion",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--17d5b053-17a0-50ce-84cd-492f9cbdaa6a",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "inc:2e272253-3c97-4c90-8a5d-d6bb943f92e9",
      "name": "Fireworks development-machine compromise on October 24"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--501d93e3-df04-5ccd-806d-bc6c2b046938",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "inc:4f3be921-7363-408a-a91b-58d15aa9368b",
      "name": "Fireworks AI October security incidents"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--f43ea881-633b-52cb-8bbf-45bcaa4a3d20",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "brh:0518f143-ea3f-496e-8a2a-bb96a57d3d93",
      "name": "Fireworks AI October security incidents"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--05100978-1318-5c26-8961-3843be31d33a",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:2d1eb0e1-e46d-4439-a25b-d1643a1c148a",
      "relationship_type": "resulted-in",
      "source_ref": "incident--501d93e3-df04-5ccd-806d-bc6c2b046938",
      "target_ref": "x-ally-event--3b80c6ca-2875-51e4-8be1-ca8c9b0bb746",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:919c87b3-99dd-47b4-a088-edf3aef2fa97",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--090f3907-33b5-5dc2-84fb-ea1194bbf0f0",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:84ba3d86-39af-42b1-9fe6-f1235cb71bb6",
      "relationship_type": "affected-organization",
      "source_ref": "incident--17d5b053-17a0-50ce-84cd-492f9cbdaa6a",
      "target_ref": "identity--eefed54b-4fcd-5511-8508-868d19a0907a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:e353f006-15e3-4d0c-8d36-b378abd3d09e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--1e14596e-2b88-5826-8caa-ae9022778cf0",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:aed42685-67db-49a8-9c83-271cb745e318",
      "relationship_type": "resulted-in",
      "source_ref": "incident--f43ea881-633b-52cb-8bbf-45bcaa4a3d20",
      "target_ref": "x-ally-event--3f37a58e-794d-5013-8fdd-fb63e64feaa3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:2414bd6a-14d2-4726-b66f-1c9c5db50186",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5f7f2c9e-cb2c-5c69-8169-d8c6fe02eea0",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:5cf9e9c1-1925-4e60-a3c5-f307d613957b",
      "relationship_type": "processor-for",
      "source_ref": "identity--eefed54b-4fcd-5511-8508-868d19a0907a",
      "target_ref": "identity--f1149548-6c2e-55e1-81dd-e28be795e284",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:6f3bc885-d837-4925-bc47-b34b210e6ceb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--6632edab-6615-5191-8502-bff6344f8e42",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:3325e81f-a4df-41b3-8210-58b28d58ea59",
      "relationship_type": "affected-organization",
      "source_ref": "incident--f43ea881-633b-52cb-8bbf-45bcaa4a3d20",
      "target_ref": "identity--f1149548-6c2e-55e1-81dd-e28be795e284",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:1e443a3a-09ca-44b2-9cd5-9819cec2bd24",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7269f122-b238-5dc8-8c40-29b04c159d18",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:f8f6ed85-ae24-4825-b419-fd3f63339f0b",
      "relationship_type": "resulted-in",
      "source_ref": "incident--501d93e3-df04-5ccd-806d-bc6c2b046938",
      "target_ref": "x-ally-event--9717c76a-9863-544a-84a0-ff9ea239635b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:3ffb8398-40e0-499e-bc62-242ba59a3bd1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--af69d9b4-2fd1-584f-8084-6982c57c776c",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:095a5551-2b73-4bcf-9c7f-cb206881f4de",
      "relationship_type": "affected-organization",
      "source_ref": "incident--501d93e3-df04-5ccd-806d-bc6c2b046938",
      "target_ref": "identity--eefed54b-4fcd-5511-8508-868d19a0907a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:3a95fbf3-298a-45d0-bfd4-f59cf6a4d419",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c89070d9-acd2-5d38-89ab-5c42fdf58c06",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:0532d739-329f-4118-a794-bbd7ee15d26c",
      "relationship_type": "resulted-in",
      "source_ref": "incident--f43ea881-633b-52cb-8bbf-45bcaa4a3d20",
      "target_ref": "x-ally-event--b637161d-0b9f-5c22-8f7f-61454467b1d1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:4dcf4f19-8a32-4c62-821f-39a9db5e6a45",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e1ea41ff-a14c-5fa9-8ee7-fe234f738523",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:28d870ea-0a99-4dc9-bea5-3f216289b3ac",
      "relationship_type": "resulted-in",
      "source_ref": "incident--501d93e3-df04-5ccd-806d-bc6c2b046938",
      "target_ref": "x-ally-event--629cd784-e954-5586-820c-a7713ca7c4f6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:1f5d44e9-e6c7-4d0e-8e3c-2ab6b83529a7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e5161cbb-8756-5a7b-8fca-9b70359ca679",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:55440b4c-7960-4b5a-9674-2ddc9bbcb773",
      "relationship_type": "resulted-in",
      "source_ref": "incident--17d5b053-17a0-50ce-84cd-492f9cbdaa6a",
      "target_ref": "x-ally-event--4cdfe0d1-27b2-5db8-8f05-ecb1408ec0d1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:39cf8645-d104-4ea0-8b38-1c6095b8629a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--00a539a3-c2b4-5d7d-8b3c-461284aed45e",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:8684c764-ea8b-46a3-9bb5-754db8e0510f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:dd13ef1b-9592-42cd-b6df-266c0b045958",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-08"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0978b7f6-5e52-54e0-8c63-e9b4880a8ac2",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:279a2507-f365-4e9e-998f-2bc26978b44e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:267083d5-7a12-47ff-b1b2-deb1c109b5b1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0f6bb47e-06dd-50de-8b5d-50c83efb8ccd",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:c4b38b5b-6ecd-4cde-a4a6-0b2138bfc0fa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:bd670bc9-9695-4e1a-9b05-a12ee4738a2b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--12caa6dd-7415-51da-8806-92f23acdb375",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:fe690ae9-c595-48a6-9d83-aa8e0a2c3131",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:1b2b6ebc-d07f-4b49-b1d0-21b59e4f0715",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Notion reported impact to fewer than 1% of workspaces, involving Notion AI chat transcripts used by Insights. For the vast majority of affected workspaces, transcripts lacked user and workspace labels and tool-call results; transcript text itself could still identify information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--25f896c3-70e5-5ca2-8b9f-7e4549463b11",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:cc2689e6-9893-47c6-ab4b-cd6604566580",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:cd30fd19-fbcb-4c38-a3b0-e4dc0896309b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Fireworks identified misuse of internal credentials and access to secrets used by evaluation jobs in a limited set of customer accounts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--26fbdb05-fa4d-5ee8-8827-d80cbd037bde",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:9b096073-f046-48d3-8d25-3815d177bba5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:ad954c9a-88c0-42c6-a509-11d7bad76ca2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The October 10 assessment found no evidence of access to models, datasets, training data, personal information or inference traffic; this was an interim assessment later broadened by the November update."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--485b358f-a281-534a-8d59-766970237e19",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:87c5939b-4cca-41c9-bd64-c2523872de4b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:a109c083-68e1-44f6-a588-73e755ec2c00",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Notion disabled Insights, stopped using Fireworks for open-weight models, contacted affected customers and offered access to impacted data inside their workspaces."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--495c8374-49f7-529e-8893-bd6cab351838",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:765c430d-1bc7-4408-bb54-08b1d387fe21",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:bf7e8fdb-c6d0-4c80-877e-adf3d7a8aca1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Notion initially identified synthetic testing data after November 2 notification and disconnected Fireworks by November 3. A November 6 warning and November 8 dataset confirmation then revealed customer-chat impact."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4c746780-07eb-5792-8bac-debbef8c6c80",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:60ab016e-3407-4625-8e25-880788aae7e3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:449b42f6-832d-4a61-a7ad-849c39063d4d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--58c4702f-afe6-5851-8037-464a2e546baf",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:80831768-f839-4a11-adbb-56ed6b8905ab",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:ca3e29d2-b363-429e-b457-d7ffd700d4c8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Fireworks said payment-card numbers were not stored and were unaffected; it had not detected impact to Inference, Training SDK or Nexus."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5eaa4615-ca40-5768-8736-6d9d682100b7",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:2aeb89f2-8cfc-46b8-a0e1-ffbfb79ab6a7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:18666495-1491-4d10-82da-a0a66e889695",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Fireworks involved law enforcement and Unit 42, rotated credentials, isolated systems and disabled self-service dataset uploads and downloads for Batch Inference and dataset-based training during investigation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--734d70a8-d684-5c28-8cac-51fc441cf821",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:71aabfc2-91c4-4fd2-addb-7fea9338b97a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:63ed69af-70de-4b5f-a874-9bdd24208c75",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "After an unnamed hosting provider was compromised on October 23, the attacker reached Fireworks development machines on October 24 and ran an unauthorized workload, causing additional customer-data impact."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7500a953-1077-5047-83b8-3ab8737b7b00",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:b7d44cd6-7899-4173-a13a-ff7c6fcf7464",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:a90c69a1-7fcd-4248-9ac1-167a17ae76f6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--79d06cb0-5f9b-5a4c-8bef-789bb3cc4dcf",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:2a21ad33-c9e5-4687-b733-75124b1fb93b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:17d61243-9735-4fdf-af6d-92c05fe69626",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Fireworks revoked identified internal credentials, affected API keys and attacker-created keys, and told affected customers to rotate third-party credentials with their issuers."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9307b09e-8594-5d89-8d66-3d56041f90e1",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:a67b0988-7e26-4405-9b15-40b8b892d9ba",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:a1e81316-c63a-4354-867a-08bd3fc199fb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Fireworks reported no further detected successful attacker access to its customer platform as of October 25; the investigation remained open."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9fbe2dcf-2744-55e7-8d7e-0b8fec6c257c",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:d4b7c969-93c8-4ef1-b26a-85bd2f53b8fb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:19f7bce8-7ede-47a7-83c7-30af62995a5f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a4819040-d4ab-5ea5-8465-53ac158afec2",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:a40e2609-dd7a-4119-99bd-a7ebec37a9e5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:08f993fd-1c9b-4cee-82d0-8f87aca8c096",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "By November 9, Fireworks reported affected resource metadata and billing details, plus secrets, datasets and incomplete model weights for a limited set of accounts. The update does not allocate every data category to a specific intrusion."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b7441de0-4262-5b2b-8e7a-f76855eee40b",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:7d09693e-c2a8-40a9-b600-cbfd5514aaaf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:e384d0b4-4757-4367-a898-99d11c1c92b7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b8693900-a47d-58d2-8a80-470e59be7619",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:9b141de5-2489-4e44-a74c-f987d2c254e2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
          "external_id": "cit:88f16f39-7682-436a-b512-eec9cc724ac1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b76cb68502d08e0225a0f6bc4fdf92670703410e1f79463e068813252ccb6fd2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bc2b68d0-20d8-505f-8f75-0eeccd9cd73b",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:3bd29c13-870a-4b4a-8bfd-901b8761a0c1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Notion",
          "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
          "external_id": "cit:8ab88410-bef0-4d50-92b2-69876037a1f6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e1772e2a834675a48546052fb57cdca077f2a25fa8b72b3531563d7b0e404a9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-03"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ec3d566b-3db5-5930-87a9-df7422f26972",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:fc3ef98a-0f73-45e4-9d6a-a81f11951a6a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Fireworks AI",
          "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
          "external_id": "cit:c8c622d7-0be6-446a-a592-ad2f799ce8fd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a22e0bf1e2915bf79b8541d7672a6b1873093a24203786eb11c0af65281b450"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ed2051e2-eb0f-5aa2-8ac1-a4ce3533faa7",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "clm:1a76b111-6853-478a-99cb-89991b364d41",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--3b80c6ca-2875-51e4-8be1-ca8c9b0bb746",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "evt:9a7ebe28-c432-404b-9240-22ffff8d3b34",
      "name": "Fireworks begins affected-customer notifications"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--3f37a58e-794d-5013-8fdd-fb63e64feaa3",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "evt:1773a408-d9a6-4b3f-b3d8-1d83e168d6b5",
      "name": "Notion disconnects Fireworks after initial synthetic-data notice"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--4cdfe0d1-27b2-5db8-8f05-ecb1408ec0d1",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "evt:b17c7602-f78b-446c-afd8-9adb15c9b091",
      "name": "Fireworks detects development-machine activity"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--629cd784-e954-5586-820c-a7713ca7c4f6",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "evt:e9017b47-4c07-4373-92e2-ee1743739636",
      "name": "Fireworks publishes initial bulletin"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9717c76a-9863-544a-84a0-ff9ea239635b",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "evt:a0e201cb-957a-4e1d-bf73-6aff2111e9e5",
      "name": "Fireworks detects credential misuse and begins containment"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--b637161d-0b9f-5c22-8f7f-61454467b1d1",
      "created": "2026-11-10T14:06:19.700800+00:00",
      "modified": "2026-11-10T14:06:19.700800+00:00",
      "x_ally_original_id": "evt:f5722066-3f87-44e8-b3f6-a3cedd91009a",
      "name": "Fireworks confirms additional dataset to Notion"
    }
  ]
}