iCreatAI News
Skip to content
Trending storyWatching

Fireworks AI breached again, Notion chat records leaked

5 reports2 sources1 days agoUpdated

Understand this story

AI overview

Fireworks AI notified customers that its data was accessed without authorization, the second known breach in a matter of weeks. Fireworks AI said a third party compromised an external cloud provider hosting its machines; the incident occurred on October 24 and involved tens of thousands of files, some containing customer data. The company is working with customers including Notion and Cursor, and has more than 10,000 customers in total. Notion subsequently disclosed that Fireworks AI notified it on November 6 that a malicious actor may have accessed customer data, and on November 8 confirmed that a new dataset contained Notion AI chat records used for the Insights feature; these records were not labeled with author or workspace and did not contain tool call results. Notion said that, according to its security team's investigation, fewer than 1% of Notion workspaces may be affected, and some chat records that cannot be attributed may have been leaked; it has contacted the owners of affected workspaces, and workspaces that have not received notification are unaffected and need take no action at this time. Notion also said it disconnected from Fireworks and deleted the relevant data on November 3. TechCrunch reported that Fireworks AI confirmed attackers breached its cloud provider and entered development systems, stealing billing information and datasets from some customers; Notion said about 1% of customers are affected. An earlier Notion announcement said fewer than 1% of workspaces may be affected, a slight difference in the two percentage statements.

AI overview based on source reports · Updated 1 days ago

Developments

2 developments

  1. Nov 10 14:00 · 4 reports
    Notion discloses Fireworks AI security incident leading to AI chat record leak
    Hacker News AI:Tell HN: Notion AI chat sessions have been exposed via Fireworks AI hack
  2. Nov 10 05:26 · 1 reports
    Fireworks AI notifies customers of data breach
    Hacker News AI:Fireworks AI Hacked

Coverage timeline

Follow the coverage to explore different perspectives.

Nov 13
  1. Hacker News AI
    Notion AI chat transcripts exposed in Fireworks AI breach

    Notion said a Fireworks AI incident affected under 1% of Notion workspaces, with the impacted dataset including Notion AI chat transcripts used for the Insights feature that were largely unattributable to users or workspaces. Notion disconnected from Fireworks on 3 November, deleted its data there, disabled Insights, and stopped serving open-weight models through Fireworks; it contacted affected customers on 9 November. Affected customers can retrieve the data in their workspace and are advised to treat it as exposed and rotate any sensitive information, passwords or API keys pasted into Notion AI during the incident timeframe.

Nov 12
  1. TechCrunch · AI
    Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

    Fireworks AI confirmed that an attacker breached its cloud provider to reach a Fireworks development system, exposing some customer billing information and datasets. Notion said the breach affected about 1% of its customers and that hackers took chat transcripts from Notion AI users of its "Insights" feature; it disconnected from Fireworks on November 3. Fireworks believes the hackers were financially motivated and aimed to sell access to large language models, marking its second breach in as many months after an October incident.

Nov 10
  1. Hacker News AI
    Fireworks AI security breach impacts Notion and their customers

    Notion says less than 1% of its workspaces may have been affected by a security incident at vendor Fireworks AI, which may have exposed unattributable Notion AI chat transcripts used for the Insights feature. Notion disconnected from Fireworks, deleted data in its system, halted training runs, and disabled Insights; affected workspace owners can review the data in their workspace. Notion recommends treating the data as exposed and rotating any sensitive credentials pasted into Notion AI during that timeframe.

  2. Hacker News AIFeatured
    Tell HN: Notion AI chat sessions have been exposed via Fireworks AI hack

    A Notion email to affected customers says a security incident at vendor Fireworks AI may have exposed data, and that Notion shut down all connections to Fireworks' systems as a precaution. On November 6 Fireworks notified Notion that malicious actors may have accessed potential customer data, and on November 8 confirmed a new dataset that included unattributable Notion AI chat transcripts used for the Insights feature, without labels identifying the author or workspace and without tool call results. Notion says the Insights feature has been disabled during the investigation and that it no longer serves open-weight models through Fireworks.

  3. Hacker News AI
    Fireworks AI Hacked

    Fireworks AI notified customers on Monday of a security breach in which their data was accessed, its second known hack in a matter of weeks. The company said an unauthorized third party breached an external cloud provider hosting its machines on Oct. 24, and a source said the breach included tens of thousands of files containing customer data in some cases. A Fireworks spokesperson said the company is working with customers including Notion and Cursor to manage the incident.

Activity for this story

Current comparable activity
6
Peak comparable activity
17Nov 13 11:00
Change in the past 24 hours
-50%

Trends compare the same fully observed participants, which may cover fewer participants than current activity. Move the pointer or tap the chart to inspect hourly activity; use the left and right arrow keys with a keyboard.