Fast Facts
- Fireworks AI’s breach was broader than first reported: attackers accessed its development environment and affected a limited number of customer accounts.
- Exposed data included billing details, resource metadata, secrets, and some incomplete model weights and datasets; payment-card numbers were not stored.
- The incident is linked to LLMjacking: criminals use stolen credentials to resell access to AI models. Fireworks says it revoked credentials and strengthened security.
- Notion was also affected: fewer than 1% of workspaces may have had AI chat transcripts exposed. Notion disabled Insights and advises affected users to rotate any credentials they shared.
Fireworks AI Finds a Wider Breach
Fireworks AI says its investigation uncovered a broader security breach than it first reported. Attackers used internal credentials and a third-party cloud provider to reach company development machines in October.
The company says the attackers accessed account and billing details, resource information, and a limited set of customers’ datasets and incomplete model weights. Fireworks does not store payment card numbers, and says attackers did not access them. The company has not found evidence of further unauthorized access to its customer platform after October 25.
Fireworks revoked credentials, rotated keys, isolated affected systems, and tightened access controls. It is notifying customers whose information the attackers reached. The company says the activity appears linked to criminals who steal AI access credentials and resell access to language models. This practice can leave customers with unexpected costs, as well as data risks.
Notion AI Chats Also Affected
Notion says the incident affected fewer than 1% of its workspaces. Its review found that exposed data included transcripts from Notion AI’s Insights feature. Most transcripts did not identify the person who wrote them or the workspace they came from. Notion says the incident did not affect other platform features.
Notion disabled Insights while it investigates and stopped serving open-weight models through Fireworks. It advises affected customers to check the data in their workspaces. Anyone who shared passwords, API keys, or other sensitive details during the incident should change those credentials.
The breach highlights a practical challenge as more people and organizations adopt AI tools: these systems can support everyday work, but they also rely on access to valuable data. Strong security helps protect that trust and makes wider use more sustainable.
Stay Ahead with the Latest Tech Trends
Stay informed on the revolutionary breakthroughs in Quantum Computing research.
Discover archived knowledge and digital history on the Internet Archive.
DataProtection-V1
