Fireworks AI, a cloud platform that lets developers run large language models, suffered a breach that exposed some customer data. The attackers first broke into Fireworks' cloud provider, then moved into a development system where they could see billing details and datasets. Notion, the popular note‑taking app, confirmed that the breach gave the hackers access to chat transcripts from its Notion AI “Insights” feature.
Notion said the breach affected roughly 1% of its workspaces. The company disconnected from Fireworks on 3 November, erased the data stored on Fireworks’ side, and stopped all communication. It later learned that the stolen transcripts were largely unattributable – they did not contain user names, workspace IDs, or tool‑call results.
What was taken and why it matters
Firewalls reports that the attackers also grabbed billing information for some Fireworks customers. The company believes the motive is financial, aiming to sell access tokens for large language models so others can run AI workloads without paying for their own compute.
Notion’s investigation showed the leaked data were only the chat logs themselves, not any linked personal identifiers. Still, the logs could include sensitive text that users typed into Notion AI, such as passwords or API keys. Notion has advised affected users to treat the data as exposed and rotate any credentials that may have been shared.
Background on Fireworks AI incidents
This is the second security incident at Fireworks AI within two months; an earlier breach was reported in October. The recurring problems highlight how many AI services depend on third‑party cloud providers, and how a compromise of one vendor can spill over to its customers.
Why it matters
If you use Notion AI, any text you typed into the chat could have been seen by the attackers, so you may need to change passwords or API keys you entered there. The incident also shows that a breach at one AI infrastructure provider can expose data from many downstream apps, underscoring the importance of supply‑chain security.
