In a recent security breach, Notion has disclosed that AI chat transcripts from less than 1% of its customer workspaces were exposed. This incident was linked to a breach at Fireworks AI, a third-party provider. The affected chat transcripts were part of Notion’s Insights feature, which helps teams analyze their AI interaction patterns. Notably, Notion’s internal systems remained uncompromised, and no other functionalities were impacted.
Details of the Security Breach
Fireworks AI initially notified Notion about the breach on the evening of November 2, 2026. The initial assessment by Notion suggested that only synthetic testing data was affected. However, after further investigation and additional alerts from Fireworks, it was confirmed on November 6 that actual customer data, specifically chat transcripts, were involved. These transcripts were used for processing Insights data, which led to a reevaluation of the potential impact.
Customer Communication and Next Steps
Notion has proactively reached out to the customers whose data was potentially exposed, providing them with guidelines to review the exposed information securely. Customers who haven’t been contacted are not required to take any immediate action. However, Notion continues to investigate the incident and will notify additional users if further data exposure is discovered.
In response to the breach, Notion has disabled its Insights feature and halted the use of open-weight models with Fireworks. The company advises affected users to change any credentials that may have been shared through Notion AI during the breach timeframe.
Privacy Concerns and Future Measures
While most of the exposed transcripts were devoid of identifiable labels, the content could still contain sensitive information that might identify individuals or businesses. This incident highlights the broader privacy implications of storing chat conversations, even when AI models themselves are secure.
Notion’s AI settings documentation indicates a temporary pause on Insights, with certain functionalities unavailable during the investigation. Users are encouraged to stay informed by reviewing updates through Fireworks’ security bulletins.
In light of this breach, it is crucial for organizations to reassess their data protection measures and strengthen their cybersecurity practices. Notion’s ongoing investigation and communication efforts aim to mitigate the impact and prevent future occurrences.
