Notion

Notion Discloses Fireworks AI Breach Exposing Customer Chat Transcripts

Notion has confirmed that a security incident at its AI infrastructure provider Fireworks AI resulted in the exposure of customer AI chat transcripts from a limited number of workspaces. The breach originated from an October 23 attack in which threat actors gained access to Fireworks AI’s development environment through a third-party cloud provider, compromising resource metadata, billing data, model weights, and datasets. Notion learned of the exposure on November 2 after Fireworks alerted the company to an exposed dataset initially described as containing only synthetic test data. In response, Notion immediately terminated traffic to Fireworks, deleted all data from the vendor’s systems, and stopped all training runs by November 3. On November 8, Fireworks confirmed that real customer data, including Notion AI transcripts used for the Insights feature, had been accessed. The affected transcripts were largely unattributable and did not include tool call results. Less than 1% of Notion users are believed to be impacted, and the company has disabled the Insights dataset while advising affected workspace owners to review exposed data and rotate any credentials entered into the chats.