THE CRUNCH
Fireworks AI has confirmed that a cyberattack exposed data belonging to some of its customers. The company, which developers use to reach open AI models, said the attacker got into its cloud provider and from there into a Fireworks development system, opening a path to some customer data. Billing information and some datasets were taken, according to the company’s latest security advisory.
Notion is one confirmed affected customer, saying the incident touched roughly 1% of its own user base. Notion said Fireworks alerted it to the incident, and on November 3 it cut its systems off from Fireworks, wiped the data held there and ended all connections between the two. Notion has now confirmed that the attackers grabbed chat transcripts belonging to Notion AI customers who used the “Insights” feature, covering anything typed into or generated by the model in the chat. It added that much of the material could not be tied back to any particular customer.
Fireworks, which counts tens of thousands of customers including legal tech company Harvey and AI company Cursor, said it believes the hackers are financially motivated, with a focus on selling access to large language models so unauthorised third parties can burn through AI usage without paying for their own resources. It is the company’s second breach in as many months, after a security incident in October.