The company has admitted that a cyberattack on Fireworks AI resulted in some customer data being compromised. Fireworks AI, the platform used by developers to access and use open AI models, announced that attackers were able to compromise the cloud provider and gain access to Fireworks development systems and access some customer data.
The company said in its latest security advisory that cybercriminals stole Fireworks customers’ billing information and some data sets. Fireworks uses its platform to promote tens of thousands of customers around the world, including legal tech company Harvey and AI company Cursor.
At least one customer confirmed to have been affected is online document editor and note taker Notion, which said in a disclosure document that the breach affected about 1% of its customers.
Notion said Fireworks alerted it to the security incident and later confirmed that hackers had stolen some of Notion’s customer data. Notion announced on November 3 that it has disconnected its systems from Fireworks, deleted data stored on the system, and terminated all connections between the two.
Notion acknowledged this week that hackers harvested chat records of Notion AI customers who used its “Insights” feature. The company said the transcripts include “inputs to or outputs from models written in chats,” but added that much of the data is unexplained and cannot be determined from which customers.
The Fireworks AI breach illustrates how technology companies rely on other technology providers for their products, and how cyberattacks can spill over to other customers as a result.
Fireworks said it believes the hackers’ motives are financial and that their objectives are focused on compromising access to the Large-Scale Language Model (LLM) and selling tokens. These schemes rely on sales to unauthorized third parties, who can exhaust the use of the AI model without using their own resources.
This is the second breach to affect Fireworks in recent months, following a security incident in October.
If you buy through links in our articles, we may earn a small commission. This does not affect editorial independence.
