Now Hacked
EN
Data breach

Fireworks AI breach exposes Notion AI chat histories

First reported · Last reported · 20 related reports

SpilloverSpillover from the Fireworks AI incident · View original incident →

A breach at Fireworks AI, Notion's AI infrastructure provider, exposed some customers' Notion AI chat histories. Notion said fewer than 1% of all workspaces were affected. Most of the exposed chat histories were difficult to link to specific users.

Key facts

Affected organization
Notion
Original incident
Fireworks AI breached again, exposing customer data and model weights
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
AI chat histories exposed in fewer than 1% of all workspaces
Cause / method
Intrusion into Fireworks AI's development environment through an external cloud provider
Location
United States

If your data was exposed

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. The possibility of chat histories being leaked following unauthorized access to a Notion AI service provider became known.
  2. Notion confirmed that AI chat histories in fewer than 1% of all workspaces were affected.
  3. It was disclosed that most of the exposed chat histories were difficult to link to specific users.

Original incident

This is spillover from the Fireworks AI incident.

  • Data breachFireworks AIKnock-on victims: 1

    Fireworks AI breached again, exposing customer data and model weights

    Impact: Some customers’ account information, billing information, secrets, datasets, and unfinished model weights

    Fireworks AI suffered renewed unauthorized access to its development systems on October 24 through a breach at an external cloud provider, 18 days after confirming the first breach. The investigation confirmed that customer account and billing information, along with some customers’ secrets, datasets, and unfinished model weights, were affected. The company revoked credentials, isolated systems, and notified all affected customers.

    Related reports: 15 · last report →

20 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.