Notion says a security incident at third-party AI provider Fireworks may have exposed some chat transcripts from its Insights feature, affecting fewer than 1% of Notion workspaces. The company disclosed the exposure in a security advisory and said it has contacted customers whose workspaces were identified as affected.
Notion said the exposed dataset contained AI chat transcripts used for Insights, a feature that helps customers understand their AI usage. For the vast majority of affected workspaces, the transcripts were unattributable: they did not include labels identifying the person who wrote them or the workspace they came from, and they did not contain tool-call results. Notion said the transcript text itself was the only information that could potentially identify a user, workspace or company. It reported no impact to other Notion features.
The company said Fireworks first notified it on November 2 about access to a small dataset that its initial review identified as synthetic testing data. Notion disconnected its systems from Fireworks and deleted its data from the provider’s systems by November 3. Fireworks warned on November 6 that customer data may also have been accessed and confirmed the additional dataset on November 8. Notion then identified the Insights transcripts in that material.
Notion used Fireworks for classification jobs behind Insights and as an inference provider for open-weight models. It has disabled Insights during the investigation and stopped serving those models through Fireworks. The disclosure adds a customer-specific impact to the wider Fireworks AI breach, which also affected account and billing information and, for a limited set of customers, secrets, datasets and incomplete model weights, according to Fireworks’ November 9 incident update.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
