Notion Customer Chat Data Exposed in Fireworks AI Breach
Fewer than 1% of Notion workspaces were affected, and Notion is asking those users to rotate any credentials they pasted into Notion AI.
Notion has told a small group of customers that data it holds was exposed in a breach at Fireworks AI, a cloud platform for running open-source AI models that Notion used for inference. Fireworks was hit twice in October, and the second intrusion, on October 24, involved an unauthorized workload that led to customer data being taken. Fireworks contained the incident that day and informed Notion on November 2 that Notion AI data had been accessed. The data in question is chat transcripts behind Notion's Insights feature, which affected fewer than 1% of workspaces, and most transcripts cannot be linked to a particular customer or workspace. Notion has advised affected users to treat the transcripts as exposed and to rotate any credentials or API keys they pasted into Notion AI during the incident, though it has not said how many customers were affected.
Why it matters
The exposure reaches Notion's own customers through a third-party AI provider they never dealt with directly, showing how a breach at one vendor can spread to the platforms built on it. Because most of the exposed transcripts cannot be tied to a specific customer or workspace, affected users cannot easily tell whether their own content was taken. Anyone who typed secrets into Notion AI during the incident window should assume those secrets may be known to attackers.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.