Fireworks AI breach hits Notion chat transcripts via cloud provider

The incident at Fireworks AI highlights a structural dependency in the AI toolchain: companies like Notion build their own AI features on top of third-party model-access platforms, so a compromise at the provider can propagate to the provider's customers. Fireworks touts tens of thousands of customers worldwide, including legal tech company Harvey and AI company Cursor, which widens the potential surface of any such spillover.

Notion's response was to sever ties entirely on November 3, deleting the data stored in its systems and stopping all connectivity with Fireworks. That the stolen transcripts were largely unattributable to specific customers complicates notification and remediation, since the company cannot always determine whose data was taken.

Fireworks said it believes the hackers are financially motivated and focused on selling tokens from breached access to large language models, a scheme that lets unauthorized third parties burn through AI model usage without using their own resources. This is the second breach affecting Fireworks in as many months, following a security incident in October.