Artificial Intelligence1 min read

Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

By · Via TechCrunch · Published by Everything Blog

In short

Attackers infiltrated Fireworks AI's cloud provider to target internal development systems, compromising customer billing records and select datasets. Notion, which utilizes Fireworks to power specific workspace capabilities, reported that roughly 1% of its users had their conversational logs exposed. Notion responded by severing all connectivity with the AI provider, wiping stored data, and isolating its environment. Fireworks indicated the financially motivated hackers sought access to high-value AI compute tokens to sell on secondary markets.

Key points

  • Notion severed all connectivity and purged stored data from Fireworks AI on November 3.: Notion severed all connectivity and purged stored data from Fireworks AI on November 3.
  • The breach affected approximately one percent of Notion's overall customer base, though m…: The breach affected approximately one percent of Notion's overall customer base, though much data was unattributable.
  • Cybercriminals targeted the provider to sell illicitly obtained tokens for expensive larg…: Cybercriminals targeted the provider to sell illicitly obtained tokens for expensive large language model compute capacity.

Sources checked by our analysis pipeline: 1

A cyberattack at Fireworks AI has exposed some of its customers’ data, the company has confirmed. Fireworks AI, a platform that developers use to access and use open AI models, said an attacker breached its cloud provider to gain access to a Fireworks development system, which allowed access to some of its customers’ data.

The company said in its latest security advisory that the cybercriminals took Fireworks’ customers’ billing information and some datasets. Fireworks touts tens of thousands of customers worldwide using its platform, including legal tech company Harvey and AI company Cursor.

At least one confirmed affected customer is online document editor and notetaker Notion, which said in a disclosure that the breach affected around 1% of its own customers.

Notion said that Fireworks alerted the company to a security incident and later confirmed that the hackers had stolen some Notion customer data. On November 3, Notion said it disconnected its systems from Fireworks, deleted the data stored in its systems, and stopped all connectivity between the two.

Notion confirmed this week that the hackers took chat transcripts of…

Artificial Intelligence