Fireworks AI breach exposed some Notion AI chat transcripts

Notion said the incident affected around 1% of its customers. Fireworks alerted the online document editor and notetaker to the breach, then confirmed that attackers had stolen some Notion customer data. On November 3, Notion said it disconnected its systems from Fireworks, deleted data stored in its systems and ended all connectivity between the companies.

The stolen transcripts include any input users submitted to the model and any output the model wrote in the chat, Notion said. It added that much of the data could not be attributed to a particular customer. Fireworks said the attackers also took customer billing information and some datasets. The platform says tens of thousands of customers worldwide use its services, including legal technology company Harvey and AI company Cursor.

Fireworks believes the hackers were financially motivated and sought to sell tokens obtained through access to large language models, or LLMs. Such schemes let unauthorized third parties use AI models without paying with their own resources, the company said. The incident is the second breach affecting Fireworks in as many months, following a security incident in October.