Notion AI chat transcripts stolen in breach at AI vendor Fireworks

Hackers who breached Fireworks AI, a company Notion used to run some AI models, took Notion AI chat transcripts from fewer than 1% of Notion workspaces. Notion says it has contacted affected customers.

In this brief: 3 sections 2 min read

- Chat transcripts: anything typed into or written by Notion AI in a chat
- Fewer than 1% of Notion workspaces affected, per Notion
- For most workspaces, nothing tied the transcripts to a user or company
- AI Meeting Notes not affected unless used in an AI chat
- Fireworks says attackers reached its development machines through a cloud provider in October
- Fireworks had kept Notion data despite a no-retention commitment, Notion says
- Fireworks also lost some customers' billing info, credentials and datasets
- As of November 3, Notion cut off Fireworks and disabled Insights
- Got a notice? In Notion on a desktop browser, open ? in the sidebar, then Security incident review
- Change any password, API key or credential you ever pasted into Notion AI
- No notice for you or your workspace owner: Notion says no action is needed now

Read full analysis on notion.com

Useful?