Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts - TechCrunch
A cyberattack at Fireworks AI has exposed some of its customers' data, including chat transcripts from Notion users, the company confirmed.
Fireworks AI, a platform that developers use to access and use open AI models, said an attacker breached its cloud provider to gain access to a Fireworks development system. This breach allowed access to some of its customers' data, including billing information and datasets.
Customer Impact
The company touts tens of thousands of customers worldwide using its platform, including legal tech company Harvey and AI company Cursor. At least one confirmed affected customer is online document editor Notion, which said the breach affected around 1% of its own customers.
Fireworks alerted the company to a security incident and later confirmed that the hackers had stolen some Notion customer data.
Data Exposure
Notion confirmed this week that hackers took chat transcripts of its Notion AI customers who used the Insights feature. The transcripts include any input to or output from the model that was written to the chat, though much of the data was unattributable.
On November 3, Notion disconnected its systems from Fireworks, deleted the data stored in its systems, and stopped all connectivity between the two companies.
Attack Motive
Fireworks believes the hackers are financially motivated, focusing on selling tokens from breaching access to large language models (LLMs). These schemes involve selling to unauthorized third parties who can use AI model resources without paying.
This marks the second breach affecting Fireworks in as many months, following a security incident in October. The breach highlights how tech companies' reliance on other providers creates cascading risks for customers.
Related
