Fireworks AI breach exposes Notion AI chats for under 1% of workspaces
Fireworks AI security breach impacts Notion and their customers
Notion says a security incident at vendor Fireworks AI may have exposed unattributable Notion AI chat transcripts from fewer than 1% of workspaces. The chats lacked user or workspace labels and contained no tool call results, so they can't be tied to specific users or companies. Notion has cut all ties with Fireworks, disabled the Insights feature, and notified affected workspace owners, who can review the data inside Notion. Users are advised to rotate any credentials pasted into Notion AI.
We recommend that you treat this data as if it were exposed.
- Shank
> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts used for the Insights feature. Chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain any tool call results. Beyond the words in the chat transcripts themselves, the data contained no information that could specifically identify the workspace, user, or company.
> As a precaution, we recommend that you treat this unattributable data as if it were exposed. If anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.
Okay, so the actual impact is quite interesting: they did not notify you if they could not attribute the transcripts to you! You should really treat anything sensitive sent to Notion AI as compromised because they are not sure where these transcripts came from.
- leumon
On Openrouter the Fireworks AI is labeled as ZDR.
> Private: this provider does not train on prompts and does not retain prompt data.
So how come notion discovered that they actually stored the data?
> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts
- bearjaws
November is going to be the month with the most breaches on record (most will be from October given 30 day notification timelines).
That is for now, I am sure there will be worse months ahead of us.
- edot
So Fireworks is ZDR by default, yet Notion configured (asked) Fireworks to retain data? Otherwise, how is there anything to leak?
On the main fireworks breach page, they also say some customer weights of models and datasets to train them were leaked.
- tiffanyh
The official announcements (original & update):
https://fireworks.ai/security/bulletins/october-2026-securit...
https://fireworks.ai/security/bulletins/october-2026-securit...