{
  "id": "fireworks-cloud-customer-data",
  "url": "https://ohshit.app/incidents/fireworks-cloud-customer-data/",
  "title": "Fireworks cloud intrusion exposed customer data including Notion AI transcripts",
  "level": 4,
  "level_name": "septic-tank-blew",
  "date": "2026-11-09",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "AI",
    "SaaS",
    "data breach"
  ],
  "ecosystems": [],
  "summary": "Fireworks disclosed a later intrusion through its R&D cloud provider and confirmed access to some customer datasets and incomplete weights. Notion found Insights chat transcripts for fewer than 1% of workspaces and notified affected customers.",
  "splash": "Fireworks customers named in exposure notices and notified Notion workspaces with affected Insights transcripts.",
  "wipe": "Review vendor notices and exposed data. Revoke and rotate credentials included in affected datasets or chats.",
  "in_the_wild": "yes",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Review the data named in Fireworks notices",
      "hint": "Use your incident notice or the contact listed on the security bulletin. Identify affected datasets, model material, metadata or billing records. Revoke and rotate exposed secrets at their issuers and review associated activity."
    },
    {
      "title": "Review affected transcripts inside Notion",
      "hint": "If notified, retrieve the impacted data inside your workspace using Notion’s instructions. Treat it as exposed and rotate passwords, API keys and other credentials pasted into affected chats."
    }
  ],
  "sources": [
    {
      "name": "Fireworks November 9 bulletin",
      "url": "https://fireworks.ai/security/bulletins/october-2026-security-incident-update",
      "says": "Describes the October cloud-provider intrusion, data categories, mitigation and ongoing investigation.",
      "primary": true
    },
    {
      "name": "Notion security notice",
      "url": "https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor",
      "says": "Explains the affected Insights transcripts, workspace notifications and credential guidance.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "Fireworks and Notion confirmed unauthorized access to affected customer data.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Oct 9, 2026",
      "title": "Fireworks publishes an earlier security bulletin",
      "body": "Fireworks initially confirms access to stored secrets used in workflows including evaluation jobs."
    },
    {
      "date": "Oct 23–24, 2026",
      "title": "Cloud provider incident leads to Fireworks development access",
      "body": "Fireworks detects an unauthorized workload on October 24 and starts containment."
    },
    {
      "date": "Nov 9, 2026",
      "title": "Fireworks and Notion publish scope findings",
      "body": "Fireworks details additional data categories. Notion describes the Insights transcript exposure and notification process."
    }
  ],
  "body_markdown": "Fireworks says an October 23 incident at its R&D cloud host enabled access to its development machines on October 24. Its investigation found affected resource metadata and billing details, including addresses, payment history, balances and credit usage. Fireworks says payment card numbers were outside scope. It temporarily disabled self-serve dataset uploads and downloads for Batch Inference and dataset-based training. It reports no detected impact to Inference, Training SDK or Nexus in its investigation to date.\n\nNotion says it disconnected from Fireworks by November 3 following a notification about synthetic test data. Fireworks notified Notion again on November 6 and confirmed a separate dataset on November 8. Notion says most affected workspaces’ transcripts lacked author or workspace labels and contained no tool-call results. The chat text itself could contain identifying information or secrets. Notion disabled Insights and continues investigating. The sources do not establish a count of affected people."
}