GoKawiilFireworks AI Breach Widens to Expose Billing Data, Model Weights; Notion AI Chats Hit
Fireworks AI disclosed that its October security incident was more extensive than first reported, with attackers gaining access to customer account and billing information, some datasets, incomplete model weights, and secrets. The company said intruders first used stolen credentials to access environment variables on October 6, then breached a third-party cloud provider hosting its development machines on October 23-24 to reach further customer data. Notion confirmed it was affected, saying fewer than 1% of its workspaces were impacted, including AI chat transcripts from its Insights feature that it described as mostly unattributable to specific users or workspaces.
GoKawiil's interpretation of the reporting above, not reported fact.
The expanding scope of the breach shows how a single compromised vendor can cascade into exposure of multiple downstream products, since Notion relies on Fireworks for AI infrastructure. Fireworks' claim that payment card data was never stored suggests the company is trying to limit the perceived severity of the incident, even as billing records and model weights were exposed. The episode highlights the growing risk that AI infrastructure providers pose as single points of failure for the consumer apps built on top of them.
- Fireworks AI's breach exposed billing info, datasets, incomplete model weights and secrets, beyond what was first disclosed.
- Notion AI chat transcripts tied to its Insights feature were affected, though Notion says most were unattributable to users.
- Attackers exploited a third-party cloud provider hosting Fireworks' R&D machines before reaching further customer data on October 24.
Source: it.slashdot.org, 2026-11-10
Published there as: “Fireworks AI Confirms Wider Breach Affecting Notion AI Chats”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.