Fireworks AI breach exposes customer data

Fireworks AI disclosed that attackers reached its development machines after a third-party cloud provider hosting its R&D machines was breached on October 23. The company said the attackers accessed resource metadata, billing information, and incomplete model weights and datasets for some customers, but not payment card numbers. Fireworks detected the activity on October 24, revoked credentials, isolated systems, and reported no further successful access as of October 25.

Notion later said the breach exposed AI chat transcripts in a small number of workspaces, including transcripts used for its Insights feature. The company said fewer than 1% of workspaces were affected, cut off traffic to Fireworks, deleted all data from Fireworks' systems, and told affected customers to treat the data as exposed and rotate credentials pasted into Notion AI.

Uber then confirmed that personal and driver's license information was stolen for thousands of drivers in the October breach. Notices filed with US attorneys general said 2,567 Massachusetts, 3,430 South Carolina, and 1,873 Rhode Island drivers were affected, with more notifications expected. Fireworks attributed the breach to financially motivated cybercriminals seeking to sell LLM access tokens.