Fireworks AI October breaches exposed billing data and Notion chats

Fireworks AI says October intrusions exposed billing data and some model weights; Notion confirmed some AI chat transcripts were exposed.

Fireworks AI says two October incidents exposed customer account and billing data, secrets and, for some customers, datasets and incomplete model weights. Attackers used internal credentials on October 6. A later compromise of an unnamed cloud provider hosting research machines led to an unauthorized workload; BleepingComputer places development-machine access on October 24, while The Hacker News says the machines were reached on October 23. Fireworks says it stores no payment card numbers, revoked credentials, and detected no further successful customer-platform access after October 25. Notion says its systems were not breached, but Insights chat transcripts from fewer than 1% of workspaces were exposed, mostly without user or workspace labels. Unit 42 is assisting and the investigation continues.