A cyberattack on Fireworks AI has exposed billing information and chat transcripts for some of its customers, including Notion. The platform provider confirmed that an attacker breached its cloud environment to access a development system, which allowed the theft of data from tens of thousands of clients. Notion stated that the breach affected approximately one per cent of its users who employed the AI Insights feature. Hackers accessed transcripts containing any input or output written to the chat by models powered through Fireworks. Much of this stolen data was unattributable, meaning it could not be linked to specific individual customers. Fireworks noted this is the second security incident affecting the company in as many months. The attackers appear financially motivated, aiming to sell access tokens that allow unauthorised third parties to consume large language model usage without paying.
This incident highlights the risks inherent in relying on third-party infrastructure for core AI capabilities. When a vendor’s security is compromised, the fallout can spill over into the data of multiple downstream clients. The exposure of chat transcripts raises concerns about whether sensitive user inputs were properly isolated during processing. Fireworks has stated it is investigating the root cause of the breach.
- Notion disconnected its systems from Fireworks on November 3 and deleted stored data.
- The stolen transcripts included all model inputs and outputs written to the chat interface.
- Fireworks suspects the attackers intend to sell usage tokens to unauthorised parties.
