Notion says Fireworks breach exposed AI chat transcripts

Notion says a breach at its AI infrastructure provider, Fireworks AI, exposed some Notion AI chat transcripts from a small number of workspaces. The company said fewer than 1% of its users were affected.

Notion learned of the issue after Fireworks alerted it on November 2 to an exposed dataset described as containing only synthetic test data. Notion cut off traffic to Fireworks, deleted its data from the vendor’s systems and halted training runs by November 3. Fireworks confirmed on November 8 that customer data, including data belonging to Notion users, had been accessed.

The exposed transcripts came from the Insights dataset, which Notion uses to give workspace administrators visibility into how teams use AI. Notion said most affected workspaces’ transcripts could not be attributed to a person or workspace, and did not include tool call results. The company has disabled the dataset.

Fireworks had contractually committed to zero data retention for Notion data, according to Notion. Workspace owners who received a notice can review potentially affected data through Security incident review in Notion’s desktop web interface and share a download link with members. Notion advises affected users to rotate credentials they entered into affected chats. It says users who have received no notice from Notion or their workspace owner do not need to act for now.