Fireworks AI breach exposed Notion AI chat transcripts

Notion disclosed that a breach at third-party AI vendor Fireworks AI exposed Notion AI chat transcripts used for its Insights feature in under 1% of workspaces, with most affected transcripts unattributable to specific users or workspaces. Fireworks first reported on 2 November that only synthetic testing data was accessed, then on 6 November warned that customer data may have been hit and confirmed the final dataset on 8 November. Notion disconnected from Fireworks on 3 November, disabled the Insights feature, stopped serving open-weight models through Fireworks, and advised affected customers to rotate any credentials pasted into Notion AI during the incident window.

Fireworks AI confirmed a cyberattack in which an attacker breached its cloud provider to reach a Fireworks development system, exposing some customer billing information and datasets. Notion said the incident affected about 1% of its customers and that hackers took chat transcripts from Notion AI users of its Insights feature; it disconnected from Fireworks on November 3. Fireworks believes the attackers were financially motivated and aimed to sell access to large language models, and this is its second breach in as many months after an October incident.