Fireworks AI breach exposes Notion AI chat transcripts (third-party data breach)
Severity: medium · Patch status: no-fix-needed · Since 2026-11-11
Notion disclosed that a breach at its AI infrastructure provider Fireworks AI exposed Notion AI chat transcripts in a small number of workspaces (under 1% of users). Fireworks confirmed an attacker accessed its development environment via a third-party cloud provider on October 23, compromising resource metadata, billing info, model weights, and datasets; this followed an earlier October breach exposing API keys and tokens. Notion was alerted November 2 about a supposedly synthetic dataset, cut off Fireworks traffic and deleted data by November 3, but on November 8 Fireworks confirmed real customer data—including Insights feature chat transcripts—was accessed. Most transcripts were unattributable and lacked tool call results. Fireworks had contractually committed to zero data retention. Notion disabled the Insights dataset and is notifying affected workspace owners.
What to do
- Rotate any passwords, API keys, or credentials entered into affected Notion AI chats
- Workspace owners: review the Security incident review page in Notion's desktop web interface and share transcript download links with members
- Check whether you or your workspace received a notification from Notion; if not, no action is currently needed
- Review third-party AI vendor data retention and security commitments in your own contracts
Sources
All live incidents on Threat Watch
