Fireworks AI breach exposed some unlabeled Notion AI chat transcripts
Notion disclosed that a security incident at vendor Fireworks AI may have affected under 1% of Notion workspaces, exposing some anonymized Notion AI chat transcripts used for its Insights feature. Notion says the exposed data lacked labels identifying the user, workspace, or company, and no other workspace data was affected. The company has disabled Insights and stopped using Fireworks to serve open-weight models while it investigates.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how third-party AI infrastructure providers can become a weak point for companies building AI features, even when the exposed data itself is not directly identifiable. Because Fireworks serves tens of thousands of customers, the breach raises questions about downstream exposure for other companies relying on the same infrastructure, though Notion states only chat content—not account or workspace identifiers—was involved.
- Fewer than 1% of Notion workspaces may have been affected by the Fireworks AI breach.
- Exposed data was limited to unattributable Notion AI chat transcripts tied to the Insights feature.
- Notion has disabled Insights and ended use of Fireworks for serving open-weight models during its investigation.
Source: notion.com, 2026-11-10
Published there as: “Fireworks AI security breach impacts Notion and their customers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.