New turn in Fireworks AI breach as Notion finds exposed AI chats
Less than 1% of Notion workspaces are possibly affected, and Notion tells owners to change each password or key that staff pasted into Notion AI.
Fireworks AI supplies AI models to customers. Attackers possibly had access to customer data there.
Notion tells that less than 1% of its workspaces are possibly affected by a breach at Fireworks AI, a vendor of AI models. On 6 November Fireworks told Notion that attackers possibly had access to customer data. The data has some Notion AI chat transcripts with no name for the writer or for the workspace.
What is new
On 8 November Fireworks told Notion that the new dataset is correct. It has chats from Insights, a Notion function that helps customers see how they use AI. The chats have no results from tools. Notion tells that no other workspace data is affected.
The numbers
Less than 1% of workspaces are possibly affected. Notion gives no count of chats or persons. Notion tells that on 3 November it cut all connections to Fireworks and removed its data there.
What is not known
Notion tells that no data identifies a user or a company as the writer of a chat. But the words in a chat can have secrets. Notion tells teams that the data is possibly exposed. It tells them to change each password or key that staff pasted into Notion AI. Notion does not tell how the attackers got in.
Insight: The risk sits two vendors deep
Wiz, a cloud firm, counted 9 or more AI developer platforms with breaches in October. Fireworks is one. Fireworks then told of a second breach through a cloud provider. At this time Notion, a customer, must tell its users. Each AI tool has vendors that have vendors too, and a breach moves down the chain to the buyer. Leaders get more control when a contract names that chain.
Sources
Posted
