Notion Says Fireworks AI Incident May Have Exposed Unattributable AI Chats in Less Than 1% of Workspaces

Notion has disclosed that a security incident at vendor Fireworks AI may have affected less than 1% of Notion workspaces. The company says some unattributable Notion AI chat sessions may have been exposed, while no other workspace data is affected. Notion has contacted affected workspace owners and says unaffected workspaces require no action.

What may have been exposed

Notion describes the exposed material as unattributable chat sessions with Notion AI. These chats were not labeled with who wrote them or which workspace they came from, and their transcripts did not contain tool call results. Beyond the words in the transcript, the data contained no information that could specifically identify a workspace, user, or company. No other data from within a workspace is affected, according to the notice.

How Notion responded

Notion says it learned from Fireworks about potential incidents earlier this month and shut down all connections to Fireworks systems out of an abundance of caution. On November 6, Fireworks notified Notion that malicious actors may have accessed potential customer data, and Notion then began another internal investigation. On November 8, Fireworks confirmed a new dataset, which Notion analyzed and found included unattributable Notion AI chat transcripts used for the Insights feature. As of November 3, Notion says it had disconnected its systems from Fireworks, deleted all data in the Fireworks system, stopped sending all data and traffic to Fireworks, and halted all training runs. The Insights feature has been disabled, and Notion is no longer serving open-weight models through Fireworks.

What affected owners can do

Affected workspace owners can view the affected data by going to their workspace sidebar, selecting the help option, and opening Security incident review. The review must be opened in a desktop browser using the latest version of Notion, and the data is not accessible on mobile. Enterprise workspace owners can access a CSV of affected workspace data and an annotated CSV with additional metadata, such as the user associated with each chat transcript. Notion says these added annotations and metadata were not exposed as part of the incident, and the resources are only available if a workspace has managed members. Owners on other plan types can access a page with a link to share with affected members, allowing each member to review a CSV of only their own affected data. Notion recommends treating the data as if it were exposed and rotating passwords, API keys, or other credentials if they were pasted into Notion AI during the relevant timeframe.

Other Notion uses of Fireworks

Notion says it previously used Fireworks for classification jobs that supported the Insights feature and as a general inference provider to serve open-weight models. Fireworks AI is described as one of the most used global AI infrastructure platforms, powering tens of thousands of customers and used by hundreds of thousands of developers. Notion also says customers in the Learning and Early Access Program volunteer data to help test new AI technology and that, in the past, it used volunteered data to experiment with training task-specific models on Fireworks.

Earlier coverage: ჰაკერები Fireworks AI-ში მესამე მხარის ღრუბლოვანი პროვაიდერის გავლით შეიჭრნენ და მომხმარებლების მონაცემები მოიპოვეს

Sources: notion.com