Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

A cyberattack astatine Fireworks AI has exposed immoderate of its customers’ data, the institution has confirmed. Fireworks AI, a level that developers usage to entree and usage unfastened AI models, said an attacker breached its unreality supplier to summation entree to a Fireworks improvement system, which allowed entree to immoderate of its customers’ data.

The institution said successful its latest information advisory that the cybercriminals took Fireworks’ customers’ billing accusation and immoderate datasets. Fireworks touts tens of thousands of customers worldwide utilizing its platform, including ineligible tech institution Harvey and AI institution Cursor.

At slightest 1 confirmed affected lawsuit is online papers exertion and notetaker Notion, which said in a disclosure that the breach affected astir 1% of its ain customers.

Notion said that Fireworks alerted the institution to a information incidental and aboriginal confirmed that the hackers had stolen immoderate Notion lawsuit data. On November 3, Notion said it disconnected its systems from Fireworks, deleted the information stored successful its systems, and stopped each connectivity betwixt the two.

Notion confirmed this week that the hackers took chat transcripts of its Notion AI customers who utilized the “Insights” feature. The institution said that the transcripts see “any input to oregon output from the exemplary that was written to the chat is included successful that chat transcript,” but added that overmuch of the information was unattributable and could not beryllium determined from which lawsuit it was obtained.

The breach astatine Fireworks AI shows however tech companies are reliant connected different tech providers for their ain offerings, and however cyberattacks can, arsenic a result, spill implicit into different customers.

Fireworks said that it believes the hackers are financially motivated and that their goals are focused connected selling tokens from breaching entree to ample connection models, oregon LLMs. These schemes trust connected selling to unauthorized 3rd parties, who tin pain done AI exemplary usage without utilizing their ain resources.

This is the 2nd breach affecting Fireworks successful arsenic galore months, pursuing a security incidental successful October.