Notion says Fireworks breach exposed customer AI chat transcripts
Fireworks AI breach exposes Notion AI chat transcripts for a small number of workspaces.
Notion disclosed that a breach at its AI provider, Fireworks AI, exposed Notion AI chat transcripts from a small number of workspaces. The incident occurred after an attacker accessed Fireworks AI's development environment via a third-party cloud provider, compromising various customer data including transcripts used for Notion's 'Insights' feature. Notion has since disabled the feature, deleted data from Fireworks' systems, and is advising affected users to rotate credentials.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Notion?
Get an email when a new story names Notion, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Notion breach illustrates how sensitive customer data can be compromised through a vendor in the supply chain, without any failure on the primary vendor's own systems. An attacker gained access to Fireworks AI's development environment via a third-party cloud provider, exposing AI chat transcripts that Notion had entrusted to Fireworks for processing. This matters because organizations often lack visibility into their sub-processors' security posture, yet remain liable for the data shared with them. The incident underscores that every link in the AI service supply chain—including cloud infrastructure providers used by AI vendors—represents a potential attack surface for sensitive user data.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.