International
The Morning Dev

Only the news worth knowing

‹
 
B46/100

Breach · high

Fireworks AI breach from cloud provider hack exposes customer data including Uber driver licenses and Notion AI chats

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Small number of Notion workspaces with Notion AI chat transcripts

Tier B because: Exploited in the wild OR public exploit

Reach

Attack

Damage

Fix

Exploited in the wild · Secrets exposed

The Brief

  • Notion disclosed that a breach at its AI infrastructure provider Fireworks AI exposed Notion AI chat transcripts.
  • Attackers accessed chat transcripts for fewer than 1% of Notion workspaces, and most transcripts were unattributable.
  • TechCrunch reports this is Fireworks' second data breach in as many months.

Why it matters

Developers and teams using Notion AI may have chat content exposed through a third-party AI provider, showing that AI features can widen the data exposure surface beyond the primary vendor.

The checklist behind the tier

Checklist · 3 of 10 yes
YesHits tech teamsJudgment: Fireworks AI is a developer-facing AI inference platform, and Notion AI is used by teams to work.
NoCore infrastructureJudgment: a breach at one AI inference vendor is not compromise of software nearly every team runs.
NoPopular toolJudgment: Fireworks AI is a niche developer AI platform, not a mainstream framework, OS or package.
YesExploited in the wildBleepingComputer: Notion says a security breach at Fireworks AI exposed customer AI chat transcripts.
NoPublic exploitNo source mentions published exploit code or a proof-of-concept.
NoRemote, no loginNo source describes the attack vector or whether unauthenticated network access was used.
NoFull takeoverNo source reports code execution, root/admin rights or account takeover; reports describe data access.
YesSecrets exposedSecurityWeek: attackers accessed chat transcripts for fewer than 1% of Notion workspaces.
NoSupply chainNo source says a package, update, build pipeline or signing key was compromised to ship malicious code.
NoNo fix yetNo source says the vendor has not shipped a fix or that the fix is incomplete.

Timeline

  1. Bloomberg Technology

    Nvidia-Backed Fireworks AI Notifies Customers of Its Second Hack in Weeks

  2. Techmeme

    AI infrastructure provider Fireworks says hackers accessed some customers' datasets, incomplete model weights, and billing information over the past month (Anna Tong/Forbes)

  3. Hacker News: Front Page

    Fireworks AI security breach impacts Notion and their customers

  4. BleepingComputer

    Fireworks AI discloses new breach after cloud provider hack

  5. www.theregister.com - Articles

    Fireworks AI gets burned twice as customer data exposure widens

  6. The Hacker News

    Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights

  7. The Record from Recorded Future News

    AI company Fireworks says hackers stole data, billing info during October breaches

  8. Notion disclosed that a breach at Fireworks AI exposed Notion AI chat transcripts in a small number of workspaces

  9. BleepingComputer

    Notion says Fireworks breach exposed customer AI chat transcripts

  10. SecurityWeek reported that attackers accessed transcripts for fewer than 1% of Notion workspaces

  11. SecurityWeek

    Notion Customer Data Compromised in Fireworks AI Hack

  12. AI News & Artificial Intelligence | TechCrunch

    Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

  13. TechCrunch

    Uber confirms hackers stole thousands of drivers’ license information in data breach

Full coverage · 11 sources

First seen · 11 sources · Full story page · How tiers are decided