Notion confirms: Third-party Fireworks AI was attacked, and some Notion AI chat records may have been accessed
Notion issued a security notice saying that its AI infrastructure provider, Fireworks AI, experienced a security incident that may have led to the unauthorized access of Notion AI chat records for fewer than 1% of workspaces.
These records are used for Notion’s Insights feature to help analyze AI usage. Notion said that the vast majority of the affected chat records were not tagged with user identity or workspace information, and did not contain tool invocation results; the chat text itself was not automatically anonymized.
Notion cut off its connection with Fireworks, deleted the relevant data and stopped communication before November 3, and notified affected customers on November 9. The company recommended that if passwords or API keys had ever been entered into Notion AI, they should be rotated immediately.
Fireworks AI had previously disclosed that its systems had been accessed without authorization, involving customer data.
Original source:
Title: Fireworks AI incident Publisher: Notion Publication date: 2026-11-10 (updated) URL: https://www.notion.com/security/advisories/security-incident-involving-a-third-party-ai-vendor Source nature: official company security notice Verification status: read this time; scope of impact, feature usage and response timeline are consistent with the notice Supporting content: supports the facts that fewer than 1% of workspaces were affected, chat records were used for Insights, most were unlabeled by identity, and the company had cut off the connection
ABAB AI Insight
The main party in the incident is the third-party vendor Fireworks AI, rather than Notion’s own system being directly breached. Chat records may have been exposed when the vendor processed them for an Insights categorization task.
“Unlabeled identity” lowers the risk of direct association, but if the chat text contains sensitive information entered by users, it could still be exposed. Notion has advised affected users to review and rotate credentials on their own.
A vendor security incident creates supply-chain risk for AI services. Notion has paused the related feature and stopped using Fireworks.
ABAB News · Cognitive Law
An incident at a third-party AI vendor can expose customer chat records.
Not being labeled with identity does not mean the chat text contains no sensitive information.
The affected scope is limited to fewer than 1% of workspaces.