GoKawiilFireworks AI breach exposed Notion AI chat transcripts for some workspaces
Notion disclosed that a security breach at its AI infrastructure vendor Fireworks AI exposed Notion AI chat transcripts tied to its Insights feature in a small number of workspaces. Fireworks had suffered a prior October breach involving stolen API keys, then a second incident on October 23 where an attacker compromised metadata, billing details, model weights and datasets. Notion cut off Fireworks traffic and deleted vendor-held data by November 3, but Fireworks confirmed on November 8 that customer data, including Notion's, had actually been accessed.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how a breach at a third-party AI infrastructure provider can cascade into exposure of customer data even after the primary vendor acted quickly to contain it. Notion says most exposed transcripts were unattributable, which could limit the practical harm, but the repeated breaches at Fireworks raise questions about the security of AI supply chains feeding workspace tools. Companies relying on outside model-hosting providers may face similar disclosure risks as these partnerships handle increasingly sensitive internal data.
- Fireworks AI suffered at least two breaches in October, later exposing Notion AI chat transcripts from its Insights feature.
- Notion cut off Fireworks AI traffic and deleted vendor-stored data by November 3 after an initial alert.
- Fireworks confirmed on November 8 that customer data, including Notion's, was actually accessed despite Notion's response.
Source: bleepingcomputer.com, 2026-11-11
Published there as: “Notion says Fireworks breach exposed customer AI chat transcripts”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.