Fireworks AI, a platform providing access to open AI models, confirmed a cyberattack involving a breach of its cloud provider. The incident allowed unauthorized access to a development system, resulting in the theft of customer billing information and datasets. The company serves tens of thousands of global clients, including Harvey and Cursor.
Notion, one of the affected customers, reported that the breach impacted approximately 1% of its user base. Upon notification from Fireworks AI, Notion disconnected its systems on November 3, deleted stored data, and terminated all connectivity. The company confirmed that hackers accessed chat transcripts from users of its AI Insights feature.
Notion noted that the stolen transcripts contained input and output data from model interactions. However, much of this information was unattributable to specific users. Fireworks AI believes the attackers are financially motivated, aiming to steal and sell tokens for unauthorized access to large language models.
This security incident marks the second breach affecting Fireworks AI within a two-month period, following a previous event in October. The situation highlights the risks associated with supply chain dependencies in the technology sector, where a compromise at a single provider can impact multiple downstream services.
