Fireworks "datasets" are used for batch inference as well as training models. Notion mentioned that the leak was due to some feature they have to classify previous ai conversations. They probably uploaded these conversations as a 'dataset' to fireworks in order to take advantage of their large batch processing discount.
the whole incident response post feels like a huge cop-out. “abundance of caution”, the vendor is one of the biggest, so ofc it’s not our fault for choosing them… etc.
> Notion AI conversations from 2 members of your workspace may have been affected. Their conversations stay private to them. They have not been proactively emailed. In order for them to access their affected data, you must share this page with them so they can download their own.
Yeah spending the morning figuring out which users are affected and what data is involved. Time well spent. Thanks, Notion.
This is a strong reminder that a company's security is only as strong as its third-party integrations. Even when customer data is handled by trusted platforms, external AI vendors can introduce additional risks. Businesses need to carefully evaluate vendor security, limit the data shared with external services, and maintain transparency when incidents happen. As AI adoption grows, third-party risk management should become a core part of every company's security strategy.
On the main fireworks breach page, they also say some customer weights of models and datasets to train them were leaked.
https://docs.fireworks.ai/guides/batch-inference
We have comparable features to Notion and Confluence, including support for self-hosted LLMs.
Over the past few months, we’ve helped many customers migrate from cloud-based providers to self-hosted deployments on their own infrastructure.
No software is immune to cyberattacks, but having control over the deployment model can greatly reduce exposure to attacks like this.
GitHub: https://github.com/docmost/docmost
Website: https://docmost.com
Yeah spending the morning figuring out which users are affected and what data is involved. Time well spent. Thanks, Notion.