Fireworks AI, a platform that lets developers access and use open-weight or open-source AI models, was hit by a cyberattack that leaked some customer data, TechCrunch reported on Wednesday.
The company said an attacker breached its cloud provider and accessed Fireworks' development systems. It said the attacker used that access to reach some customer data.
In its latest security advisory, Fireworks said cybercriminals took customer payment information and some datasets.
Fireworks is used by tens of thousands of customers worldwide, and legal tech company Harvey and AI company Cursor are also customers, TechCrunch reported.
One affected customer is online document editing and note-taking service Notion. Notion disclosed that the incident affected about 1 percent of its customers. It disconnected its systems from Fireworks on Nov. 3 and deleted data stored on Fireworks' systems.
Notion said it confirmed this week that hackers took chat logs from customers who used Notion AI's "Insights" feature. The logs include both model inputs and outputs used in the chats. Notion added that it cannot identify which customers much of the data belongs to.
Fireworks said it believes the hackers were seeking money. It said the goal was to steal access rights to large language models and sell tokens.
Fireworks also suffered a security incident in October.