Notion Says AI Chats From Under 1% of Workspaces Were Exposed

Notion disclosed that a breach at Fireworks AI exposed saved AI chat transcripts from fewer than 1% of its workspaces, including messages that may have contained users’ passwords or other credentials.

The exposed transcripts included messages sent to Notion AI and the system’s replies. Notion is notifying affected users and recommends treating any passwords or other credentials entered into AI chats as exposed, changing them and checking account login records for suspicious activity.

Fireworks processed data for Insights, a Notion feature that helps workspace administrators understand how team members use AI. Notion sent saved conversations to the provider to generate those analytics. Fireworks also served as an inference provider for some open-weight models in Notion’s products.

The disclosure follows Fireworks’ earlier customer-data breach disclosure.