Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

What happened

Fireworks AI, a platform that provides access to open AI models, experienced a cyberattack that resulted in unauthorized access to some customer data. The attacker breached Fireworks' cloud provider and accessed a development system, which led to exposure of billing information and datasets. Notion, a customer of Fireworks, confirmed that around 1% of its users had their Notion AI chat transcripts accessed. Notion responded by disconnecting from Fireworks and deleting stored data on November 3.

Key details

• Fireworks AI has tens of thousands of customers, including Harvey and Cursor.
• The breach allowed access to billing information and datasets through Fireworks' cloud provider.
• Notion said the breach affected about 1% of its customers who used the Notion AI 'Insights' feature.
• The chat transcripts included both user inputs and model outputs, but much of the data could not be linked to specific customers.
• Fireworks believes the attackers aimed to sell unauthorized AI model tokens to third parties.

Why it matters

Notion customers who used the AI 'Insights' feature are directly affected, with some of their chat transcripts exposed. Companies that rely on Fireworks AI for their services face potential data security risks and may need to review their own connections and data handling practices. The incident also creates a risk of unauthorized use of AI model tokens, which could result in financial losses for affected organizations.