Source : TechCrunch
SAN FRANCISCO, November 12, 2026 – A cyberattack at Fireworks AI has exposed some of its customers’ data, the company has confirmed, and at least one of those customers, the workplace software firm Notion, has said that hackers obtained chat transcripts from a slice of its Notion AI users.
TechCrunch, citing Fireworks’ latest security advisory, reported on November 12 that an attacker breached the firm’s cloud provider, gained access to a Fireworks development system and, through that path, reached some customer information. Fireworks said the criminals took customers’ billing information and some datasets. The company, which provides access to open artificial intelligence models, says it has tens of thousands of customers worldwide, among them the legal technology firm Harvey and the coding assistant Cursor.
Notion said Fireworks first alerted it to a security incident and later confirmed that hackers had stolen some Notion customer data. On November 3, Notion said, it disconnected its systems from Fireworks, deleted the data stored in those systems and stopped all connectivity between the two. This week it confirmed that the stolen material included chat transcripts of Notion AI customers who used the “Insights” feature. Those transcripts, Notion said, included “any input to or output from the model that was written to the chat”, though it added that much of the data was unattributable and could not be tied to a particular customer. The breach affected around 1 per cent of Notion’s own customers, the company said.
Fireworks has said it believes the attackers are financially motivated and that their aim is to sell tokens obtained by breaking into large language model systems, allowing unauthorised third parties to use the models without paying for their own capacity. TechCrunch noted that this is the second breach affecting Fireworks in as many months, after a security incident in October. The earlier incident is mentioned only as context; the new confirmed harm is the customer data, including Notion’s Insights transcripts, taken in this attack.
The episode is a reminder of how far a single supplier can sit inside another company’s product. Notion’s AI feature depended on Fireworks; when Fireworks’ development environment was reached through its cloud provider, some of Notion’s users were reached as well. Harvey and Cursor were named as Fireworks customers in the same report, but Notion is the firm that has so far confirmed a specific impact on its own users. Other customers have not, in the coverage to hand, issued similar notices.
Fireworks’ advisory and Notion’s disclosure are the official basis for what can be said with confidence: some billing data and datasets were taken from Fireworks, some Notion AI Insights chats were among them, about 1 per cent of Notion’s customers were affected, and the two companies have now been disconnected. Fireworks has not, in the material published so far, named a ransom demand or a figure for the number of billing records taken. The identities of the attackers, and a full list of every customer reached, have not been published.
Source : TechCrunch, citing Fireworks AI’s security advisory and Notion’s disclosure.
Source : TechCrunch
About The Author
