Notion AI chats stolen in breach at vendor Fireworks AI

On 9 October, Fireworks announced that a third party had used internal credentials to read environment variables, which often contain access keys, on a limited number of customer accounts. Notion cut all connections to the vendor as a precaution. On 6 November Fireworks told Notion that customer data may also have been accessed, and confirmed it two days later.

Notion's analysis found conversations sent for Insights. For most affected workspaces, they carry neither the author's name nor the originating workspace, and they do not include tool results, meaning the document excerpts the AI retrieves to answer.

Why it still matters

The content alone can be enough to identify people. Notion says nothing links a conversation to a user "beyond what the transcript itself contains". If someone pasted a client name, a contract or an API key into the chat, the text can point back to that person or company.

Notion therefore advises treating the data as exposed. Anyone who pasted passwords, API keys or other credentials into Notion AI during the period should change them immediately.

The company has suspended Insights and will no longer use Fireworks for its open-weight models. Workspace owners can review affected data on desktop only, via the "?" menu in the sidebar and then "Security incident review".