Overview
Severity: CRITICAL | Affected: SynthAI | Category: breach
Leading artificial intelligence firm SynthAI confirmed it was the victim of a sophisticated cyberattack that resulted in a significant data breach. Attackers, believed to be a state-sponsored group, gained access to the company's core infrastructure by compromising a senior engineer's credentials through a targeted phishing campaign. The breach exposed the personal information and prompt histories of over 5 million users. More critically, the threat actors exfiltrated the proprietary model weights for 'AURA-4', SynthAI's unreleased flagship large language model, and two other specialized models. This theft represents a catastrophic loss of intellectual property and raises serious concerns about the potential for the models to be reverse-engineered or used for malicious purposes. The company has since shut down the compromised systems and is working with federal law enforcement agencies to investigate the incident.