Fireworks AI Cyberattack Exposes Notion Customer Chat Transcripts

A cyberattack on Fireworks AI compromised a development system through its cloud provider, giving hackers access to customer data including billing details and datasets. Among the affected companies is online document editor Notion, which confirmed that approximately 1% of its customers had their chat transcripts exposed. Notion stated that the unauthorized access affected users of its Notion AI Insights feature, revealing inputs and outputs written to the chat. Upon notification from Fireworks AI, Notion disconnected its systems and deleted stored data on November 3. Fireworks AI believes the financially motivated hackers aimed to sell tokens by breaching large language models. This security incident highlights how software supply chain dependencies can cause third-party cyberattacks to impact external customers.