Notion AI chat transcripts exposed in Fireworks AI breach
Original title: Notion Customer Data Compromised in Fireworks AI Hack
Fewer than 1% of Notion workspaces were affected, and most transcripts cannot be tied to a customer.
Notion is notifying a small set of customers that Notion AI data was accessed in a Fireworks AI breach. Fireworks was hacked twice in October, once with compromised internal credentials and once through a third-party cloud host of R&D machines. On October 24 attackers ran an unauthorized workload; Fireworks contained it that day and notified Notion on November 2. Accessed data was Notion AI chat transcripts used for the Insights feature.
Unconfirmed: Notion did not disclose how many customers were affected.
- Fireworks was breached twice in October, including through compromised internal credentials.
- The October 24 incident involved an unauthorized workload on hosted R&D machines.
- Fireworks contained that incident the same day and notified Notion on November 2.
- Notion had used Fireworks as an inference provider for open-weight models.
Impact: Notion AI chat transcripts, possibly including pasted secrets
| Product | Affected |
|---|---|
| Notion AI | — |
- 1.Rotate passwords, API keys, or other credentials pasted into Notion AI.
- Vendors
- Fireworks AI
- Products
- Notion AI
- Victims
- Notion
From the original article
1 min read at securityweek.com
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable. The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.