Service update · Cursor
Cursor traces its security incident to an access key leaked by Fireworks
- Announcement time
- Review updated
An attacker used an access key exposed by Fireworks to copy old agent traces from non-Privacy Mode sessions, then used credentials in them to reach internal tools. Traces of under 0.05% of users leaked, and each was notified; if you didn't get a notice, your traces were not involved. Cursor believes the incident is contained.