Fireworks AI 确认发生网络攻击，导致部分客户数据泄露。Fireworks AI 是一个供开发者访问和使用开源 AI 模型的平台，该公司表示，攻击者入侵了其云服务提供商，从而获取了 Fireworks 的一个开发系统的访问权限，进而访问了部分客户数据。
A cyberattack at Fireworks AI has exposed some of its customers’ data, the company has confirmed. Fireworks AI, a platform that developers use to access and use open AI models, said an attacker breached its cloud provider to gain access to a Fireworks development system, which allowed access to some of its customers’ data.
该公司在其最新的安全公告中表示，网络犯罪分子窃取了 Fireworks 客户的账单信息和部分数据集。Fireworks 宣称其平台拥有全球数万名客户，其中包括法律科技公司 Harvey 和 AI 公司 Cursor。
The company said in its latest security advisory that the cybercriminals took Fireworks’ customers’ billing information and some datasets. Fireworks touts tens of thousands of customers worldwide using its platform, including legal tech company Harvey and AI company Cursor.
至少有一家确认受影响的客户是在线文档编辑和笔记工具 Notion，该公司在一份披露中表示，此次泄露影响了其约 1% 的客户。
At least one confirmed affected customer is online document editor and notetaker Notion, which said in a disclosure that the breach affected around 1% of its own customers.
Notion 表示，Fireworks 曾通知该公司发生安全事件，随后确认黑客窃取了部分 Notion 客户数据。11 月 3 日，Notion 称已将其系统与 Fireworks 断开连接，删除了存储在其系统中的数据，并停止了双方之间的所有连接。
Notion said that Fireworks alerted the company to a security incident and later confirmed that the hackers had stolen some Notion customer data. On November 3, Notion said it disconnected its systems from Fireworks, deleted the data stored in its systems, and stopped all connectivity between the two.
Notion 本周确认，黑客窃取了使用“洞察”功能的 Notion AI 客户的聊天记录。该公司表示，这些记录“包含写入聊天的任何模型输入或输出”，但补充称，大部分数据无法归因，无法确定来自哪个客户。
Notion confirmed this week that the hackers took chat transcripts of its Notion AI customers who used the “Insights” feature. The company said that the transcripts include “any input to or output from the model that was written to the chat is included in that chat transcript,” but added that much of the data was unattributable and could not be determined from which customer it was obtained.
Fireworks AI 的这次泄露事件显示了科技公司对其他技术提供商的依赖，以及网络攻击如何因此波及到其他客户。
The breach at Fireworks AI shows how tech companies are reliant on other tech providers for their own offerings, and how cyberattacks can, as a result, spill over into other customers.
Fireworks 表示，认为黑客是出于经济动机，其目标集中在出售通过入侵大语言模型（LLM）访问权限获得的令牌。这些骗局依赖于向未经授权的第三方出售，后者可以在不使用自身资源的情况下消耗 AI 模型额度。
Fireworks said that it believes the hackers are financially motivated and that their goals are focused on selling tokens from breaching access to large language models, or LLMs. These schemes rely on selling to unauthorized third parties, who can burn through AI model usage without using their own resources.
这是两个月内 Fireworks 遭遇的第二次泄露事件，此前已于 10 月发生过一起安全事故。
This is the second breach affecting Fireworks in as many months, following a security incident in October.