The AI inference company says a financially motivated group was behind the attack, and that a separate incident at a cloud provider let the attacker reach its development machines.
Fireworks AI said in an updated security notice on Monday that its investigation into an incident first disclosed on 9 October found the attacker had reached account and billing information, including billing and shipping addresses, invoice and payment history, account balances and credit usage, and, for a limited set of accounts, secrets, datasets and incomplete model weights. The company said payment card numbers are not stored by Fireworks and were not affected. It said the evidence indicates links to a financially motivated group selling unauthorized access to large language models, a practice known as “LLMJacking”. In a separate incident, a third-party cloud provider hosting Fireworks research and development machines was breached on 23 October, and the next day the attacker used it to reach Fireworks development machines, Fireworks said. It is notifying affected customers and working with Palo Alto Networks Unit 42. Notion, in its own advisory, said fewer than 1% of workspaces were affected, that Notion AI chat transcripts were involved, and that affected users who pasted credentials into Notion AI should rotate them.
Sources: Fireworks AI · Notion · The Record · The Register