---
title: Notion: the Fireworks AI breach exposed Notion AI chat transcripts used for its Insights feature, in under 1% of workspaces | ctxsec
url: https://ctxsec.com/items/notion-fireworks-ai-breach-exposed-notion-ai-insights-chat-transcripts-under-1-percent
description: "Notion says its inference vendor Fireworks AI told it on Nov 2 that a small dataset had been accessed (Notion found only synthetic test data), and Notion cut off and deleted all data at Fireworks by the morning of Nov 3. On Nov 6 Fireworks said customer data may also have been accessed, and on Nov 8 it confirmed a dataset that included Notion AI chat transcripts used for the Insights feature. Notion says most of those transcripts were unattributable (not labeled with user or workspace) and contained no tool-call results. Notion has disabled Insights, stopped serving open-weight models through Fireworks, and contacted affected customers."
status: "official (Notion security advisory, Nov 9, updated Nov 10, 2026); Notion says its own systems were not breached"
published: 2026-11-11
---

> Notion says its inference vendor Fireworks AI told it on Nov 2 that a small dataset had been accessed (Notion found only synthetic test data), and Notion cut off and deleted all data at Fireworks by the morning of Nov 3. On Nov 6 Fireworks said customer data may also have been accessed, and on Nov 8 it confirmed a dataset that included Notion AI chat transcripts used for the Insights feature. Notion says most of those transcripts were unattributable (not labeled with user or workspace) and contained no tool-call results. Notion has disabled Insights, stopped serving open-weight models through Fireworks, and contacted affected customers.

[← AI](/ai) · [markdown](/items/notion-fireworks-ai-breach-exposed-notion-ai-insights-chat-transcripts-under-1-percent.md)

official (Notion security advisory, Nov 9, updated Nov 10, 2026); Notion says its own systems were not breached

2026-11-11 7:41 PM ET

### Notion: the Fireworks AI breach exposed Notion AI chat transcripts used for its Insights feature, in under 1% of workspaces

- **If you were notified:** review the affected data in your workspace as instructed, treat it as exposed, and rotate any passwords, API keys or other credentials pasted into Notion AI during the incident window.
- **If you weren't:** Notion says no action is needed now and it will contact workspaces it later finds affected.
- **Lesson:** Notion says Fireworks had committed to zero data retention for Notion data (per BleepingComputer). An AI subprocessor that runs analytics on stored chats holds a copy of your prompts; include it in vendor reviews and data-retention questions.
- Background: our earlier item on Fireworks's own Nov 9 incident update.

Sources: [Notion security advisory: Fireworks AI incident (first published Nov 9, updated Nov 10, 2026)](https://www.notion.com/security/advisories/security-incident-involving-a-third-party-ai-vendor-nov9) · [BleepingComputer: Notion says Fireworks breach exposed customer AI chat transcripts (Nov 11, 2026)](https://www.bleepingcomputer.com/news/security/notion-says-fireworks-breach-exposed-customer-ai-chat-transcripts/)