Notion AI chat transcripts exposed in Fireworks AI breach
Original title: Notion AI Data Breach Exposes Customer Chat Transcripts After Third-Party Fireworks AI Cyberattack
Fewer than 1% of Notion workspaces were affected; Notion says its own systems were not breached and notified customers on November 9.
Notion confirmed that a cyberattack on AI provider Fireworks AI exposed customer chat transcripts used for Notion AI Insights. Notion disconnected from Fireworks on November 3, deleted data held there, and later stopped Insights and open-weight inference through Fireworks. Most affected transcripts lacked author or workspace labels and excluded tool-call results, but text inside chats could still identify people or contain secrets. The investigation is ongoing, and Notion has not given a transcript count, exposure window or entry point.
Unconfirmed: Notion has not disclosed the exposure window, transcript count or how attackers entered Fireworks AI.
- Fireworks first described a small dataset on November 2 that Notion thought was synthetic test data.
- Fireworks confirmed the final affected dataset on November 8.
- Customers who pasted passwords or API keys are told to rotate them.
- Workspaces that did not receive a November 9 notice are not currently identified as affected.
- Fireworks supported Insights classification jobs and open-weight model inference.
Impact: Notion AI chat transcripts from under 1% of workspaces exposed
- 1.Retrieve exposed chat data using Notion's emailed instructions and treat it as exposed.
- 2.Rotate passwords, API keys or other credentials pasted into chats during the incident window.
- Vendors
- NotionFireworks AI
- Victims
- Notion
From the original article
2 min read at gbhackers.com
Notion has confirmed that a cyberattack against its AI infrastructure provider, Fireworks AI, exposed customer chat transcripts affecting fewer than 1% of Notion workspaces. The company said its own systems were not breached and no other Notion features were affected. Impacted customers received notifications on November 9, 2026, while the investigation remains ongoing.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.