Fireworks AI Hit by Second Breach; Notion Confirms Leak of AI Chat Transcripts for ~1% of Users
AI infrastructure provider Fireworks AI suffered its second security breach in two months, leading to the theft of Notion AI chat transcripts and billing data for approximately 1% of Notion's customers.
Fireworks AI, a platform used by developers to access open AI models, has confirmed a cyberattack where hackers breached its cloud provider to gain access to a development system, exposing some customer data. This marks the company's second security incident in as many months.
Online document editor Notion confirmed it was among the affected customers, stating in a disclosure that the breach impacted around 1% of its own users. Notion reported that hackers stole chat transcripts from Notion AI customers who used the “Insights” feature. These transcripts include “any input to or output from the model that was written to the chat.” While much of the data was unattributable, the incident highlights the supply-chain risks in AI: when an infrastructure provider is compromised, downstream enterprises relying on them face direct exposure.
Fireworks AI believes the attackers were financially motivated, aiming to sell tokens obtained from breaching access to large language models so unauthorized third parties could consume AI resources without paying. Notion disconnected its systems from Fireworks on November 3 and deleted stored data.