Fireworks AI Cyberattack Exposes Customer Data and Notion Chat Transcripts
Fireworks AI, a platform providing developer access to open AI models, has confirmed a security breach resulting from an attack on its cloud provider. The intrusion allowed hackers to access a development system, compromising customer billing information and various datasets. This incident highlights the systemic risks in the AI supply chain, as vulnerabilities in third-party providers can lead to significant data exposure for downstream users. Notion, a prominent online document editor, confirmed that approximately 1% of its customers were affected. Specifically, hackers accessed chat transcripts from Notion AI users utilizing the 'Insights' feature, which includes all model inputs and outputs. In response, Notion disconnected its systems from Fireworks on November 3 to mitigate further risk. This marks the second security incident reported by Fireworks AI in two months.
Topics: AI infrastructure cloud security cyberattack data breach information security
Read the full article at TechCrunch
Part of the story Nvidia-backed Fireworks AI hit by second cyber incident, exposes data: report (3 articles)