# Cyberattack on Fireworks AI exposed Notion customers' chat transcripts

published: 2026-11-12T19:05:38.455Z
topic: infrastructure
breaking: true
source: https://techcrunch.com/2026/11/12/cyberattack-on-fireworks-ai-allowed-hackers-to-access-notion-customers-chat-transcripts/
url: https://aiagentnews.io/stories/cyberattack-on-fireworks-ai-exposed-notion-customers-chat-transcripts

Attackers breached Fireworks AI's cloud provider and reached a Fireworks development system, exposing some customer data including billing information and datasets. Notion says the breach affected about 1% of its customers, with chat transcripts from its Notion AI Insights feature taken.

Fireworks AI, a platform developers use to access open AI models, said an attacker got into its cloud provider and then into a Fireworks development system, which allowed access to some customer data. The company said in a security advisory that the attackers took billing information and some datasets. Fireworks says its customers include Harvey and Cursor.

Notion, an online document editor and notetaker, said the breach affected around 1% of its customers. Fireworks alerted Notion to the incident and later confirmed that Notion customer data had been stolen. Notion says it disconnected its systems from Fireworks on November 3, deleted the data stored in its systems and ended all connectivity between the two.

Notion confirmed that the hackers took chat transcripts from Notion AI customers who used the Insights feature. The company said much of the data cannot be linked to a specific customer. Fireworks believes the attackers are financially motivated and aim to resell access to large language model tokens to unauthorized third parties. This is the second Fireworks breach in two months, after an incident in October.

## Why it matters if you build agents

If your agents call third-party model providers, a breach at one of them can expose your billing data, datasets and chat content even when your own systems are secure.

Review which provider data you send and store, and check whether your vendors have confirmed scope and whether you need to rotate credentials or revoke connections.