Hackers Access Notion AI Chat Transcripts via Cyberattack on Fireworks AI

Open-source AI platform Fireworks AI has confirmed a cyberattack that allowed unauthorized actors to infiltrate its cloud provider and access a company development system. The incident compromised select customer datasets as well as billing details, impacting notable clients such as legal tech firm Harvey and coding assistant Cursor, which utilize the platform to deploy AI models.

Among the affected organizations is the workspace productivity tool Notion, which reported that the security lapse impacted approximately 1% of its user base. According to Notion's disclosures, the unauthorized parties acquired chat transcripts generated by users of the Notion AI Insights feature. These compromised logs contained inputs and outputs written during chat sessions, though Notion noted that much of the data remains difficult to attribute to specific individuals.

Upon notification from Fireworks AI, Notion severed its connections on November 3, purged the relevant stored data, and terminated all integrations between the two services. Fireworks AI stated that the incident marks its second security breach in two months. Investigators believe the perpetrators are financially motivated actors attempting to harvest and resell unauthorized LLM tokens to third parties.