Apify Rotates API Tokens and Prompts 2FA Resets After Detecting Unauthorized Access

Notion Notifies Customers of Data Exposure Following Fireworks AI Breach Linked to LLMJacking

Notion is notifying a small set of customers that their information was compromised in a data breach involving Fireworks AI. Fireworks AI, a cloud platform for running and fine-tuning open source AI models, suffered two separate intrusions in October. The first involved compromised internal credentials, while the second occurred on October 24 through a third-party cloud provider hosting Fireworks R&D machines and was tied to rising LLMJacking activity. Attackers executed an unauthorized workload that led to the compromise of Notion AI chat transcripts used for the Insights feature. Fewer than 1% of Notion workspaces were affected, and most transcripts could not be attributed to specific customers or workspaces. Notion has advised affected users to treat the data as exposed and rotate any credentials that may have been shared in chats during the incident period.

Baker Tilly Notifies Clients of Data Breach at Third-Party Provider Exposing Personal Information

Baker Tilly Advisory Group has begun notifying clients that a data breach at a third-party service provider has exposed personal information belonging to clients and their dependents. The firm discovered the incident on September 6, 2026, and completed its review of affected data on October 28, confirming that an unauthorized actor obtained client-related records stored on the provider's platform. Although the notification does not specify the total number of impacted individuals or name the service provider, data from the Office of the Texas Attorney General indicates that 10,456 Texas residents alone had Social Security numbers, full names, addresses, and other personal details exposed. Baker Tilly states it took immediate containment steps, engaged external investigators, and notified law enforcement, while confirming no evidence of unauthorized activity on its own networks and no reported cases of identity theft or fraud linked to the incident. Affected individuals are being offered 24 months of credit and identity monitoring services through Experian. BleepingComputer has not received additional details from the company and found no ransomware group claims associated with the breach.

Notion Discloses Fireworks AI Breach Exposing Customer Chat Transcripts

Notion has confirmed that a security incident at its AI infrastructure provider Fireworks AI resulted in the exposure of customer AI chat transcripts from a limited number of workspaces. The breach originated from an October 23 attack in which threat actors gained access to Fireworks AI’s development environment through a third-party cloud provider, compromising resource metadata, billing data, model weights, and datasets. Notion learned of the exposure on November 2 after Fireworks alerted the company to an exposed dataset initially described as containing only synthetic test data. In response, Notion immediately terminated traffic to Fireworks, deleted all data from the vendor’s systems, and stopped all training runs by November 3. On November 8, Fireworks confirmed that real customer data, including Notion AI transcripts used for the Insights feature, had been accessed. The affected transcripts were largely unattributable and did not include tool call results. Less than 1% of Notion users are believed to be impacted, and the company has disabled the Insights dataset while advising affected workspace owners to review exposed data and rotate any credentials entered into the chats.