Notion customer data compromised in Fireworks AI hack

Tier A · Patch today – Before you go home

Who’s exposed: Notion workspaces whose chat transcripts were accessed

Tier A because: Core infrastructure or popular tool AND exploited in the wild

Reach

Attack

Damage

Fix

Popular tool · Exploited in the wild · Secrets exposed

The Brief

Attackers accessed chat transcripts for fewer than 1% of Notion workspaces, according to SecurityWeek.
The breach was tied to a hack of Fireworks AI.
Most of the accessed transcripts could not be attributed to specific users.

Why it matters

Teams whose Notion workspaces used the chat features may have had conversation content exposed, so they should assess what sensitive information was discussed there.

The checklist behind the tier

Checklist · 4 of 10 yes

Yes	Hits tech teams	Notion is a SaaS workspace platform that teams use and ops must manage.
No	Core infrastructure	Notion is a productivity app, not software nearly every engineering team runs as infrastructure.
Yes	Popular tool	Notion is a widely used platform adopted by many teams and organizations.
Yes	Exploited in the wild	SecurityWeek: attackers accessed chat transcripts for fewer than 1% of Notion workspaces.
No	Public exploit	SecurityWeek describes the breach; it does not mention any published exploit code or PoC.
No	Remote, no login	SecurityWeek does not say how attackers gained access or whether credentials were needed.
No	Full takeover	SecurityWeek reports transcript access only; no code execution, admin rights or account takeover is stated.
Yes	Secrets exposed	SecurityWeek: attackers accessed chat transcripts, customer data from Notion workspaces.
No	Supply chain	SecurityWeek does not report a compromised package, update, build pipeline or signing key.
No	No fix yet	SecurityWeek does not say a fix is missing; this is a breach, not an unpatched vulnerability.

Source

Notion Customer Data Compromised in Fireworks AI Hack ↗ SecurityWeek · 3h ago

First seen 3h ago · 1 source · Full story page · How tiers are decided