Key facts
- Fireworks AI said the attacker breached its cloud provider to reach a Fireworks development system.
- Fireworks said the attackers took customers' billing information and some datasets.
- Notion said the breach affected around 1% of its own customers.
- Notion said the stolen transcripts cover input to and output from the model written to the chat.
- Fireworks said it believes the hackers were financially motivated and sought to sell access to large language models.
- Fireworks said the incident was its second breach in as many months, after an October security incident.
Fireworks AI, a platform developers use to access and run open AI models, said an attacker breached its cloud provider to gain access to a Fireworks development system, which allowed access to some of its customers' data. In its latest security advisory, the company said the attackers took customers' billing information and some datasets. Fireworks says tens of thousands of customers worldwide use its platform, including legal tech company Harvey and AI company Cursor.
At least one confirmed affected customer is online document editor and notetaker Notion, which said in a disclosure that the breach affected around 1% of its own customers. Notion said Fireworks alerted it to a security incident and later confirmed that the hackers had stolen some Notion customer data. On November 3, Notion said it disconnected its systems from Fireworks, deleted the data stored in its systems and stopped all connectivity between the two.
Notion confirmed that the hackers took chat transcripts of its Notion AI customers who used the Insights feature. The company said the transcripts include any input to or output from the model that was written to the chat, but added that much of the data was unattributable and it could not be determined from which customer it was obtained.
Fireworks said it believes the hackers were financially motivated and that their goals were focused on selling tokens from breached access to large language models. Such schemes rely on selling to unauthorized third parties, who can use AI model capacity without using their own resources. Fireworks said the incident was the second breach affecting it in as many months, following a security incident in October.