Notion AI Chat Transcripts Exposed in Fireworks AI Breach

Breach at AI Infrastructure Provider Fireworks AI

A security incident at Fireworks AI, an artificial intelligence infrastructure provider, has exposed Notion AI chat transcripts from a small fraction of Notion workspaces. According to the disclosure, the breach affected less than 1% of Notion workspaces that use the AI-powered features integrated through Fireworks AI.

What Happened

Fireworks AI provides backend infrastructure for various AI applications, including Notion’s AI chat functionality. During the breach, unauthorized access was gained to systems that process and store chat transcripts generated by Notion AI. The exact technical details of how the breach occurred have not been publicly disclosed, but the exposure specifically involved conversation histories between users and the Notion AI assistant.

Scope of Exposure

The incident is reported to have impacted fewer than 1% of Notion workspaces. While this represents a small percentage of the overall user base, any exposure of private conversations raises significant privacy concerns. Chat transcripts may contain sensitive business information, personal data, proprietary code, or confidential communications that users entered while interacting with Notion AI.

Immediate Actions for Affected Users

Notion and Fireworks AI are advising all potentially affected customers to take immediate protective measures. The primary recommendation is to rotate any passwords, API keys, or other credentials that were pasted into Notion AI conversations. Since users often share credentials or sensitive tokens during troubleshooting or development discussions with AI assistants, these could now be in the hands of unauthorized parties.

Users should also review their Notion AI conversation history for any sensitive information shared during chats. While the breach is limited to chat transcripts, the nature of AI interactions means users may have inadvertently disclosed confidential data during routine use.

Broader Implications for AI Service Security

This incident highlights the growing security challenges in the AI infrastructure supply chain. As more companies integrate third-party AI providers into their products, the attack surface expands. Organizations using AI-powered tools must consider not only their own security practices but also the security posture of their AI infrastructure providers.

The breach also underscores the importance of data handling policies for AI conversations. Users should be aware that interactions with AI assistants may be stored, processed by third parties, and potentially exposed in security incidents.

Next Steps and Monitoring

Affected workspace administrators should monitor official communications from Notion and Fireworks AI for updates on the investigation. Both companies are expected to provide more detailed technical reports and guidance as the investigation progresses. Users who believe their data was compromised should consider the exposed information as potentially public and act accordingly to mitigate any risks.

This incident serves as a reminder to treat AI chat interfaces with the same caution as any other communication channel that may be logged or processed by external services.