Hackers breached Fireworks’ cloud provider to access the Fireworks development system and stole billing information and datasets from customers. Notion confirmed that around 1% of its customers were affected by the breach, with hackers stealing chat transcripts from users of the Notion AI Insights feature. This incident marks the second data breach for Fireworks AI in as many months, following an incident in October.
Fireworks believes the attackers are financially motivated and selling unauthorized access to LLMs. The company has tens of thousands of customers worldwide, including Harvey and Cursor. The attackers accessed the Fireworks development system, which allowed them to steal billing details and datasets from the platform’s user base.
Organizations relying on Fireworks for model hosting should review their security posture immediately. The theft of chat transcripts from Notion AI Insights users raises concerns about the privacy of sensitive business discussions stored in AI tools. Developers using Fireworks services must assume their data may have been compromised and take steps to secure their accounts and data. This breach highlights the risks of using third-party cloud providers for sensitive AI workloads.
