Observed Signal · Nov 12, 2026 · Data Breach · Source: techcrunch · Impact: 4/5 · Sentiment: Negative
Fireworks AI Breach Exposes Notion Chat Transcripts
A cyberattack on Fireworks AI, a platform for accessing open AI models, exposed customer data including billing information and datasets. The breach allowed hackers to access a development system through the cloud provider. Notion, a confirmed affected customer, disclosed that approximately 1% of its customers were impacted, with chat transcripts from its Notion AI 'Insights' feature stolen. Notion disconnected from Fireworks on November 3, deleting stored data and halting connectivity. Fireworks believes the attackers are financially motivated, aiming to sell tokens for unauthorized LLM access. This is Fireworks' second breach in two months, following an incident in October.
This breach highlights significant security vulnerabilities in the AI/LLM infrastructure, impacting a major company like Notion and raising concerns about data privacy and third-party dependencies. The second breach in two months underscores systemic risks in AI supply chains.
Track Fireworks AI Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your Polaris7 workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Fireworks AI suffered a cyberattack, exposing customer billing information and datasets.
- At least one affected customer is Notion, with approximately 1% of its customers impacted.
- Hackers stole chat transcripts from Notion AI's 'Insights' feature.
- Notion disconnected from Fireworks on November 3, 2026.
- This is Fireworks' second breach in two months, following an October incident.
Connected Companies & Entities
“Fireworks AI, a platform for accessing open AI models, suffered a cyberattack exposing customer data.”
“Notion, a customer of Fireworks AI, was affected by the breach, with chat transcripts from its AI feature stolen.”
“Fireworks touts tens of thousands of customers including AI company Cursor.”
“Fireworks touts tens of thousands of customers including AI company Cursor.”
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
CodeWall Breaches Bain Pyxis AI Platform in 18 Minutes
Cybersecurity start-up CodeWall used autonomous AI agents to probe enterprise systems and gained access to Bain & Company’s Pyxis platform in roughly 18 minutes, the Financial Times reports. The researchers say the breach allowed them to view nearly 10,000 AI chatbot conversations, including queries from Bain employees and some client-related prompts. Access was reportedly gained by using a username and password found in publicly available web code; CodeWall also discovered employee email addresses and security tokens that could enable account impersonation or new account creation. Bain says it investigated and quickly fixed the issue and disputed aspects of CodeWall’s characterization. CodeWall previously reported similar findings at McKinsey and BCG; it focuses on companies that invite ethical hacking exercises.
Meta's Muse AI Chat Security Flaw Exposes 6,800 Conversations
Meta has temporarily disabled the sharing feature of its AI agent Muse after security firm Claroc discovered that over 6,800 private conversations were publicly accessible via web searches. The vulnerability stemmed from shareable URLs that included conversation titles and were indexed in public DNS records, bypassing the intended obscurity of random identifiers. The exposed data included confidential corporate information such as revenue analyses, loan applications, internal HR details, interview notes, and a company's vacation calendar. Meta stated it would review the feature's privacy protections, but Claroc's CTO noted that his report went unanswered. The incident raises privacy concerns, especially in Germany where data protection is a major issue, and could damage public trust. Meanwhile, Muse has seen explosive growth, with 10.9 million global downloads in 40 days, driven by Meta's marketing push and integration across its ecosystem.
Unauthorized Access Reported to Anthropic's Mythos
A private online forum reportedly gained unauthorized access to Mythos, Anthropic's recently announced enterprise cybersecurity AI, by leveraging credentials or access through a third‑party vendor. Bloomberg told TechCrunch the group demonstrated use of the model with screenshots and a live demo; Anthropic says it is investigating and has found no evidence the activity impacted its own systems. Mythos had been distributed selectively to vendors including Apple under an initiative called Project Glasswing. The incident highlights third‑party supply‑chain risks for restricted AI releases and the potential for security tools to be repurposed if access controls fail.
Receive all future signals for Fireworks AI & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.