Notion says Fireworks AI breach exposed AI chat transcripts
Original title: Notion Confirms AI Chat Transcripts Exposed in Fireworks AI Breach, Affecting Customer Workspaces
Insights transcripts from fewer than 1% of workspaces were exposed; most lacked author or workspace labels.
Notion confirmed that attackers who accessed a Fireworks AI dataset exposed Notion AI chat transcripts used for its Insights feature, affecting fewer than 1% of customer workspaces. Notion said its own systems were not breached and other features were unaffected. Fireworks first alerted Notion on November 2; customer-data exposure was confirmed on November 8 after an earlier review found only synthetic data. Notion disconnected from Fireworks, deleted data held there, paused Insights, and told affected customers to review transcripts and rotate secrets pasted into chats.
Unconfirmed: Notion’s investigation is still open, so the set of affected customers may grow.
- Notion disconnected from Fireworks and deleted hosted data by the morning of November 3.
- Most affected transcripts were unattributable and did not contain tool-call results.
- Customers who were not notified are not currently identified as affected.
- The investigation remains open and more customers may be contacted.
Impact: Notion AI Insights chat transcripts exposed via a vendor
| Product | Affected |
|---|---|
| Notion AI | — |
| Fireworks AI | — |
- 1.Review identified transcripts and treat them as exposed.
- 2.Change passwords, API keys, and other credentials pasted into Notion AI.
- 3.Unaffected customers need no action unless Notion sends a later notice.
- Vendors
- NotionFireworks AI
From the original article
2 min read at cybersecuritynews.com
Notion has confirmed that a security incident at Fireworks AI exposed Notion AI chat transcripts linked to fewer than 1% of its customer workspaces. Insights, a feature that helps teams understand their AI usage, used the affected conversations. Notion said its own systems were not breached and no other Notion features were affected.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.