Now Hacked
EN-GB
Data breach

Fireworks AI breach exposes Notion AI chat histories

First reported · Last reported · 20 related reports

SpilloverSpillover from the Fireworks AI incident · View original incident →

A breach at Fireworks AI, Notion's AI infrastructure provider, exposed some customers' Notion AI chat histories. Notion said fewer than 1% of all workspaces were affected. Most of the exposed chat histories were difficult to attribute to specific users.

Key facts

Affected organisation
Notion
Original incident
Fireworks AI breached again, exposing customer data and model weights
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
AI chat histories exposed in fewer than 1% of all workspaces
Cause / method
Intrusion into Fireworks AI's development environment through an external cloud provider
Location
United States

If your data was exposed

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. The possibility of chat histories being leaked following unauthorised access to a Notion AI service provider became known.
  2. Notion confirmed that AI chat histories in fewer than 1% of all workspaces were affected.
  3. It was disclosed that most of the exposed chat histories were difficult to attribute to specific users.

Original incident

This is spillover from the Fireworks AI incident.

  • Data breachFireworks AIKnock-on victims: 1

    Fireworks AI breached again, exposing customer data and model weights

    Impact: Some customers’ account information, billing information, secrets, datasets and unfinished model weights

    Fireworks AI experienced further unauthorised access to its development systems on 24 October through a breach at an external cloud provider, 18 days after confirming the initial breach. The investigation confirmed that customer account and billing information, as well as some customers’ secrets, datasets and unfinished model weights, were affected. The company revoked credentials, isolated systems and notified all affected customers.

    Related reports: 15 · last report →

20 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.