Notion says Fireworks breach exposed customer AI chat transcripts

Notion has confirmed a data breach exposing financial and payment data.

Notion, the digital workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in a small number of workspaces.

The disclosure comes shortly after Fireworks AI confirmed that an attacker accessed its development environment via a third-party cloud provider on October 23 and compromised resource metadata, billing information, model weights, and datasets for some customers.

However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users.

Anyone whose data Notion held is potentially affected, specifically customers whose records were exposed.

Fireworks AI experienced another breach in early October, when hackers accessed environment variables containing API keys and tokens stored as secrets for a limited number of accounts.

Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3.

Financial data has a short shelf life for the victim to react -- fraudulent charges can show up within days, not months.

Stolen credentials travel -- attackers routinely test them against unrelated services, which is why the exposure doesn't stop at the breached system's own doors.

Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2 about an exposed dataset that contained only synthetic test data.

The access point here was stolen login credentials, not a technical vulnerability.

Notion advises affected users to rotate any passwords, API keys, or other credentials entered into affected chats.

The exposed transcripts came from the Insights dataset specifically, which has now been disabled.

Potentially affected workspace owners should review the data through Security incident review in Notion’s desktop web interface and share a link with members that lets them download their own transcripts.

If you have any relationship with Notion, watch for phishing attempts that reference this breach specifically -- stolen data often gets reused this way.

Any reused password from this account is worth changing immediately, especially on other services where the same password might still be active.

A fraud alert on financial statements is worth considering now, since financial data exposure tends to turn into attempted fraud quickly.

Any unsolicited message referencing this breach is worth treating with suspicion, since attackers commonly impersonate the breached company afterward.