So Fireworks is ZDR by default, yet Notion configured (asked) Fireworks to retain data? Otherwise, how is there anything to leak?
On the main fireworks breach page, they also say some customer weights of models and datasets to train them were leaked.
happygoose 30 minutes ago [-]
Fireworks "datasets" are used for batch inference as well as training models. Notion mentioned that the leak was due to some feature they have to classify previous ai conversations. They probably uploaded these conversations as a 'dataset' to fireworks in order to take advantage of their large batch processing discount.
the whole incident response post feels like a huge cop-out. “abundance of caution”, the vendor is one of the biggest, so ofc it’s not our fault for choosing them… etc.
frankotron 2 hours ago [-]
Forcing us to the Enterprise plan to see which members are affected huh? Classy move Notion.
Andugal 2 hours ago [-]
> Notion AI conversations from 2 members of your workspace may have been affected. Their conversations stay private to them. They have not been proactively emailed. In order for them to access their affected data, you must share this page with them so they can download their own.
Yeah spending the morning figuring out which users are affected and what data is involved. Time well spent. Thanks, Notion.
chinathrow 31 minutes ago [-]
We also have 2 members affected in our org. I wonder if this is a coincidence or just a fixed template.
XVar 16 minutes ago [-]
It's a coincidence, we got the e-mail stating 1 user affected
clilog_d 2 hours ago [-]
[flagged]
vinaygundeti18 3 hours ago [-]
This is a strong reminder that a company's security is only as strong as its third-party integrations. Even when customer data is handled by trusted platforms, external AI vendors can introduce additional risks. Businesses need to carefully evaluate vendor security, limit the data shared with external services, and maintain transparency when incidents happen. As AI adoption grows, third-party risk management should become a core part of every company's security strategy.
Rendered at 10:57:06 GMT+0000 (Coordinated Universal Time) with Vercel.
On the main fireworks breach page, they also say some customer weights of models and datasets to train them were leaked.
https://docs.fireworks.ai/guides/batch-inference
We have comparable features to Notion and Confluence, including support for self-hosted LLMs.
Over the past few months, we’ve helped many customers migrate from cloud-based providers to self-hosted deployments on their own infrastructure.
No software is immune to cyberattacks, but having control over the deployment model can greatly reduce exposure to attacks like this.
GitHub: https://github.com/docmost/docmost
Website: https://docmost.com
Yeah spending the morning figuring out which users are affected and what data is involved. Time well spent. Thanks, Notion.