Fireworks AI suffered a cyberattack and some customer data was stolen, while about 1% of Notion users were affected. This week, Notion further confirmed that the chat logs of some users of Notion AI's "Insights" feature were leaked, involving content input or output by the model in conversations.
Fireworks AI is a platform that provides developers with access to and invocation services for open-source AI models. The company said attackers breached its cloud service provider, then gained access to Fireworks' development systems and stole some customer billing information and datasets. Fireworks has tens of thousands of customers worldwide, including legal tech company Harvey and AI coding company Cursor.
Notion said that after Fireworks notified it of the security incident, the company confirmed that some customer data was affected, involving about 1% of users. The leaked data includes chat logs generated by using the Notion AI Insights feature, but because some data lacks traceable information, it is currently impossible to determine the specific users involved. On Nov. 3, Notion cut off its system connection with Fireworks, deleted the relevant stored data, and stopped all connections between the two parties.
Fireworks believes the attack may have been financially motivated, with hackers attempting to obtain tokens by breaching large language models and then reselling them to third parties that do not need to consume their own resources. This is also Fireworks' second data security breach in just a few months, following a security incident in October 2026.
This incident once again exposes security risks in the supply chain of AI companies. As companies increasingly rely on third-party model services and cloud infrastructure, vendor security vulnerabilities may spread along the technology chain, and user data protection and third-party service provider management will become issues that cannot be ignored in the commercialization of AI.
