Fireworks AI breach exposed some Notion customer chat transcripts

In short: Fireworks AI confirmed a cyberattack that exposed some customer data, and Notion says hackers accessed some Notion AI chat transcripts affecting about 1% of its customers.

What happened

Fireworks AI said an attacker broke into its cloud provider and then accessed a Fireworks development system. Fireworks is a service that companies use to run and use AI models, which are the software “brains” behind tools like chat features.

In a security advisory, Fireworks said the attacker took customer billing information and some datasets. Datasets are collections of information used to build or run AI (like a training workbook for a student). Fireworks said it has tens of thousands of customers.

Notion confirmed it was affected. Notion said Fireworks first alerted it to the incident and later confirmed that hackers stole some Notion customer data. Notion said it disconnected from Fireworks on November 3, deleted the data stored in its systems, and stopped all connections between the two.

Notion also said hackers accessed chat transcripts from Notion AI customers who used the “Insights” feature. A chat transcript is the saved back and forth of what a person typed and what the AI replied (like a saved text message thread). Notion said much of the data could not be clearly tied to specific customers.

Fireworks said it believes the hackers were financially motivated. It also said this is the second breach affecting Fireworks in as many months, following a security incident in October.

Why it matters

This incident shows how a security problem at one vendor can spill into other products people use every day. If you use AI chat tools at work, saved prompts and answers can sometimes end up in logs or transcripts, and those records may be exposed if a partner company is breached.

Source: TechCrunch AI