Fireworks AI confirmed a cyberattack that exposed customer data after hackers breached its cloud provider and accessed a development system. The attackers stole billing information and some datasets from customers. Fireworks serves tens of thousands of customers worldwide, including Harvey and Cursor.
Notion, an online document editor and notetaker, was a confirmed affected customer. The breach impacted around 1% of Notion's own customer base. Hackers stole chat transcripts from Notion AI customers who used the "Insights" feature, including any input to or output from the model written to chat. Notion said much of the data was unattributable and could not be traced to specific customers.
On November 3, Notion disconnected its systems from Fireworks, deleted stored data, and stopped all connectivity between the two companies.
Fireworks believes the attackers are financially motivated and aim to sell tokens from breached access to large language models. Unauthorized third parties can use stolen tokens to consume AI model usage without their own resources.
This breach marks the second incident at Fireworks in two months, following a security incident in October.