The Fireworks AI data breach exposed chat transcripts belonging to Notion customers, the productivity software company. Notion said fewer than 1% of its workspaces were affected by the cyberattack on its third-party AI infrastructure provider.
The exposed information included messages exchanged with Notion AI, which may have contained confidential business information, passwords, and API keys users entered. Notion has notified affected customers and advised them to replace any credentials found in the compromised conversations.
Fireworks disclosed additional details in its November 9 security update. The company said investigators identified unauthorized access to customer information and linked the activity to a financially motivated cybercriminal group.
Fireworks AI Data Breach Exposed Notion Chat Transcripts
Notion used Fireworks AI to process information for Insights, a feature that helps workspace administrators understand how employees use artificial intelligence tools.
The service analyzed stored AI conversations to produce usage insights. According to Notion, some of those chat transcripts remained on Fireworks infrastructure despite contractual commitments concerning data retention.
The exposed records could include user prompts, AI-generated responses and sensitive information entered during conversations. Notion said most affected transcripts did not contain additional metadata directly identifying a user, company or workspace.
However, individual messages could still reveal confidential details. Notion has not publicly disclosed the exact number of affected workspaces or individual users.
The company explained the exposure in its official customer security notice, which also provides instructions for reviewing affected information.
How Attackers Accessed Fireworks AI Systems
Fireworks initially disclosed a security incident on October 9, 2026. Its investigation subsequently identified additional unauthorized activity involving a third-party cloud provider.
On October 23, the cloud provider hosting Fireworks research and development machines experienced a security incident. The following day, attackers used that access to reach Fireworks development systems and run unauthorized workloads.
Fireworks detected the activity on October 24 and began containment measures. The company said it had found no further evidence of successful unauthorized access to its customer platform after October 25.
Investigators identified exposure involving account information, billing records, selected datasets and incomplete AI model weights. Fireworks said payment card numbers were not affected because it does not store them.
The company linked the attack to a financially motivated operation involving LLMJacking. This technique exploits unauthorized access to AI systems to obtain computing resources or resell access to language models.
Fireworks said its investigation remains ongoing and that additional findings could emerge.
Notion Disconnects Fireworks and Disables Insights
Notion disconnected Fireworks from its infrastructure on November 3 and stopped sending customer data to the provider. It also said it deleted its data held in Fireworks systems and suspended related training operations.
The company turned off its Insights feature during the investigation. It also stopped using Fireworks to serve open-weight AI models within Notion.
Notion acknowledged that its contractual zero-data-retention arrangement had not prevented the retention of information processed through certain Fireworks endpoints.
Fireworks separately stated that its investigation found no detected impact on its Inference, Training SDK, and Nexus services. The companies’ disclosures address different services and data-handling arrangements.
Notion is now auditing critical AI vendors to determine whether they follow agreed data minimization and retention requirements.
What Affected Notion Customers Should Do
Notion has contacted workspace owners whose information was identified as affected. Customers who have not received a notification are not currently required to take action, although the investigation continues.
Affected users can open their Notion workspace, select the help menu and choose Security incident review. They can then download files containing the exposed conversation text.
Workspace owners with verified domains can also access additional information about affected members and conversations.
Notion recommends reviewing these records for passwords, API keys and other credentials. Revoke or replace any potentially exposed credentials promptly.
TechAmerica previously reported on the OpenCode Console security breach, which involved potentially exposed AI credentials and reports of unauthorized charges.
Fireworks Continues Security Investigation
Fireworks has engaged Palo Alto Networks Unit 42 to assist its investigation and strengthen security controls.
The company has revoked and replaced credentials, restricted network access and improved monitoring. It also temporarily disabled certain self-service dataset upload and download functions.
The Notion incident illustrates how security failures at an AI infrastructure provider can expose information belonging to another company’s customers. A separate third-party security breach involving Vercel previously raised similar concerns about external services exposing customer information.
Notion has not announced when Insights will return or whether it will reinstate Fireworks as a provider. Both companies continue investigating the incident, and the full extent of the data exposure has not been publicly established.
