A cyberattack on Fireworks AI breached the company’s cloud provider and gave attackers access to a Fireworks development system, exposing some customer data. Fireworks said the hackers stole billing information and datasets from its customers, which include legal-tech firm Harvey and AI firm Cursor. Notion, an online document editor and notetaker, confirmed that about 1% of its customers were affected; the breach gave hackers chat transcripts from Notion AI’s “Insights” feature, containing any input or output written to the chat. Notion disconnected from Fireworks on November 3, deleted the stored data and halted all connectivity. Fireworks believes the actors are financially motivated, aiming to sell tokens that grant unauthorized access to large language models. This is the second Fireworks breach in as many months, following an October incident. 1