Breach · medium
Notion says Fireworks AI breach exposed customer AI chat transcripts
Tier B · Patch this week – Put it in the sprint
Who’s exposed: Notion AI chat transcripts in a small number of workspaces
Tier B because: Exploited in the wild OR public exploit
Reach
Attack
Damage
Fix
Exploited in the wild · Secrets exposed
What to do
- Review Notion workspaces for sensitive content shared through Notion AI chats
- Check Notion's disclosure for whether your workspace was affected
The Brief
- Notion disclosed that a breach at its AI infrastructure provider Fireworks AI exposed Notion AI chat transcripts.
- The exposure affected a small number of Notion workspaces.
- The source is a BleepingComputer report dated 2026-11-11.
Why it matters
Teams using Notion AI should assume chat content sent to Notion AI may have been exposed through a third-party AI provider, and review what sensitive data was shared with it.
The checklist behind the tier
Checklist · 3 of 10 yes
| Yes | Hits tech teams | Judgment: Notion and Fireworks AI provide workspace and AI infrastructure that developers and IT teams use and run. |
| No | Core infrastructure | Judgment: a breach at one AI inference provider is not compromise of software nearly every team runs. |
| No | Popular tool | Judgment: Fireworks AI is a specialist AI provider, not a mainstream framework, tool or platform. |
| Yes | Exploited in the wild | BleepingComputer: a security breach at Fireworks AI exposed Notion AI chat transcripts. |
| No | Public exploit | BleepingComputer: no exploit code or proof-of-concept is mentioned in the source. |
| No | Remote, no login | BleepingComputer: the source does not describe how the attacker gained access. |
| No | Full takeover | BleepingComputer: the source describes exposed chat transcripts, not code execution or admin takeover. |
| Yes | Secrets exposed | BleepingComputer: the breach exposed Notion AI chat transcripts in a small number of workspaces. |
| No | Supply chain | BleepingComputer: the source reports a data breach, not malicious code shipped through a trusted channel. |
| No | No fix yet | BleepingComputer: the source does not state whether a fix or patch is unavailable. |
Timeline
Notion disclosed that the Fireworks AI breach exposed Notion AI chat transcripts
BleepingComputer
Notion says Fireworks breach exposed customer AI chat transcripts
Source
Notion says Fireworks breach exposed customer AI chat transcripts ↗ BleepingComputer · 49 min ago
First seen · 1 source · Full story page · How tiers are decided