Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

Summary

• Fireworks AI confirmed a cyberattack exposed customer data after attackers breached its cloud provider to access a development system.
• The attackers stole customer billing information and datasets from the platform used by tens of thousands of customers worldwide.
• Notion is a confirmed affected customer, with the breach impacting approximately 1% of its own user base.
• Notion disconnected its systems from Fireworks, deleted stored data, and halted connectivity on November 3.
• Hackers stole chat transcripts from Notion AI customers who utilized the "Insights" feature, though much of the data was unattributable to specific users.
• Fireworks believes the attackers are financially motivated and aimed to sell tokens from breached large language models to unauthorized third parties.
• This incident marks the second security breach affecting Fireworks in as many months, following an October security incident.