Notion says Fireworks breach exposed customer AI chat transcripts
Notion says under 1% of users are affected and has disabled the Insights dataset after Fireworks confirmed access on November 8.
Notion disclosed that a breach at AI infrastructure provider Fireworks AI exposed Notion AI chat transcripts from a small number of workspaces. Fireworks said an attacker reached its development environment through a third-party cloud provider on October 23, compromising resource metadata, billing information, model weights, and some customer datasets. Notion cut Fireworks traffic, deleted vendor-held data, and stopped training runs by November 3. Most exposed transcripts were unattributable and lacked tool-call results; affected users are told to rotate credentials entered in those chats.
Unconfirmed: An initial Fireworks alert described only synthetic test data; customer-data access was confirmed later, on November 8.
- Fireworks reported the October 23 intrusion after an earlier October exposure of API keys and tokens.
- Notion first heard on November 2 that an exposed dataset held only synthetic test data.
- Fireworks had contractually committed to zero data retention for Notion data.
- Affected workspace owners can review transcripts in Security incident review and share download links.
- Users who received no notice are told no action is needed for now.
Impact: Notion AI chat transcripts and some Fireworks customer data exposed
| Product | Affected |
|---|---|
| Fireworks AI AI infrastructure | — |
| Notion AI | — |
- 1.Rotate passwords, API keys, or other credentials entered into affected Notion AI chats.
- 2.Affected workspace owners should review data in Security incident review and share member download links.
- Vendors
- Fireworks AI
- Products
- Notion AI
- Victims
- Notion
From the original article
2 min read at bleepingcomputer.com
Notion, the digital workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in a small number of workspaces. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.