In its first notice, on 10 October, Fireworks said an attacker used internal credentials to reach environment variables, including API keys, in some customer accounts, and that no access to models or data had been found. According to the new update, on 23 October the attacker reached the company's development environment through a third-party cloud provider that hosted research machines, and the next day ran an unauthorized workload there that affected more customer data. Fireworks says it does not store payment card numbers and they were not affected.
According to Fireworks, the evidence points to a financially motivated criminal group that sells stolen access to language models through illicit routing services, a practice known as LLMjacking. Notion said fewer than 1% of its workspaces were affected and that the data included Notion AI chat transcripts used for its Insights feature, mostly not attributable to a user or workspace. The company disabled Insights and stopped serving open-weight models through Fireworks.
What to do: Fireworks is notifying affected customers. Notion customers who received a notice should review the exposed data inside their workspace, and if they pasted passwords, API keys or other credentials into chats, rotate them immediately.