Fireworks discloses unauthorized use of internal credentials

Fireworks says it identified unauthorized use of internal credentials and has contained the incident, revoked the credentials and directly notified all identified affected customers. Its investigation is ongoing with a cybersecurity firm. The company says it is tightening access controls, reviewing how secrets are exposed to evaluation jobs and strengthening its defenses.