Notion confirmed a Notion AI chat leak in the security incident at Fireworks AI, its AI infrastructure vendor. The confirmation was published in an official Notion security advisory and expands the case Geekiki had already reported: the Fireworks breach also reached data from customers of the productivity platform.
What happened
According to the advisory, on November 6 Fireworks notified Notion of a security incident affecting fewer than 1% of Notion workspaces. The company says it has already contacted affected customers and that anyone who did not receive the notice needs to take no action right now.
The timeline published by Notion shows two phases. On the evening of November 2, Fireworks said a small dataset had been accessed by malicious actors; the investigation found it contained Notion AI synthetic testing data, with no customer data involved. Out of caution, on the morning of November 3 Notion disconnected its systems from Fireworks, deleted the data held on the platform and stopped all communication with it.
On November 6, however, Fireworks warned that malicious actors may have accessed potential customer data. The new dataset was confirmed on November 8 and, on analysis, Notion discovered it included Notion AI chat transcripts used by the Insights feature. For the vast majority of affected workspaces, the chats were "unattributable": with no labels saying who wrote them or which workspace they came from, and without tool call results. Beyond what is in the transcript itself, there is no information tying the chats back to workspaces, users or companies.
What Notion did
In response, Notion disabled the Insights feature while it investigates and stopped serving open-weight models through Fireworks. No other Notion feature was affected, according to the advisory.
What to do if you were affected
Notion advises affected customers to treat the data as if it had been exposed. Anyone who pasted sensitive information, passwords, API keys or other credentials into Notion AI during the incident timeframe should rotate them. Affected customers can retrieve and review the impacted data securely inside their own workspace, following instructions sent by email.
The case is a follow-up to the Fireworks AI breach, which had already reported access to customer data and model weights. The company said the intrusion began on October 24, via an external cloud provider, and the episode was reported on November 9. Read Geekiki's earlier coverage: Fireworks AI expands breach disclosure: customer data and model weights were exposed.
Image credit: Notion logo, by Notion Labs, Inc., via Wikimedia Commons (public domain).
Sources: Notion — Fireworks AI incident (official security advisory).
Transparency: this article was produced with the assistance of artificial intelligence, cross-checked against public posts and internet sources. Please consult the original sources to verify the information.
Muse
