Fireworks AI breach exposed some Notion AI chat transcripts, Notion says
Announced · Published · By Contractor AI Shop
Notion says a breach at its AI vendor Fireworks AI exposed Notion AI chat transcripts from its Insights feature in under 1% of workspaces, mostly unattributable. Notion cut off Fireworks, disabled Insights and tells affected customers to rotate any passwords or API keys pasted into Notion AI.
Key facts
- Notion disclosed the incident this week and says it affects <1% of Notion workspaces. Its timeline: Fireworks told Notion on Nov 2 that a small set of data, which turned out to be synthetic test data, had been accessed; Notion disconnected from Fireworks by the morning of Nov 3 and deleted its data there on Nov 4; Fireworks said on Nov 6 that customer data may have been accessed and confirmed the final dataset on Nov 8; Notion contacted impacted customers on Nov 9. Notion (security advisory)
- Notion says the dataset included Notion AI chat transcripts used for its Insights feature, which for the vast majority of impacted workspaces were unattributable: not labeled with who wrote them or which workspace they came from, and without tool call results. Notion says no other Notion features were affected. Notion (security advisory)
- Notion used Fireworks for Insights classification jobs and to serve open-weight models in Notion. Insights is disabled while Notion investigates, and Notion no longer serves open-weight models through Fireworks. Notion tells affected customers to treat the data as exposed and rotate any passwords, API keys or other credentials pasted into Notion AI. Notion (security advisory)
- Notion's updates say it revoked exposed Notion API keys found in affected messages on Nov 11, and on Nov 12 reported exposed third-party API keys to the vendors that issued them. Notion (security advisory)
- BleepingComputer (Bill Toulas, Nov 11) reports that Fireworks AI confirmed an attacker accessed its development environment through a third-party cloud provider on Oct 23, and that Notion's FAQ says Fireworks had contractually committed to zero data retention for Notion data. BleepingComputer (Bill Toulas)
- TechCrunch (Zack Whittaker, Nov 12) reports that Fireworks said the attackers took customers' billing information and some datasets, and that Fireworks believes they are financially motivated. TechCrunch (Zack Whittaker)
Our take: what it means for contractors
The lesson for any office using AI inside shared tools: never paste passwords, bank logins or API keys into an AI chat. Your vendor's vendor can leak it, even with a zero-data-retention promise in place (per BleepingComputer, Notion's FAQ says Fireworks had committed to one).
What we don't know yet
- How many Fireworks customers were hit in total
- Whether users of other apps were exposed
Sources
- Notion (security advisory) · Fireworks AI incident · 2026-11-12 · Primary
- BleepingComputer (Bill Toulas) · Notion says Fireworks breach exposed customer AI chat transcripts · 2026-11-11 · Secondary
- TechCrunch (Zack Whittaker) · Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts · 2026-11-12 · Secondary