[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMWOB4XDqXPlxyydmYPz_Mq_UIJqE6rQ07FRXI0cOluo":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":43,"controls":44},"9b141475-d106-4a50-9922-ed7ff987ecd2","third-party-ai-vendor-breach-exposes-notion-customer-chat-data","d1a436e5-9e82-45e4-a5c8-b3cda301fbe1","Third-Party AI Vendor Breach Exposes Notion Customer Chat Data","Notion's customer data was compromised not through a direct attack on Notion itself, but through a breach of Fireworks AI, a third-party vendor handling AI chat transcripts for the Insights feature. This is a classic supply chain security failure: sensitive customer data was processed and stored by an external platform that became the attack surface. The incident highlights the risk of extending trust implicitly to vendors who handle personal or sensitive data on your behalf. Even when a company's own security posture is strong, a weaker link in the vendor chain can expose customer data at scale. Organizations must treat third-party data processors as extensions of their own security perimeter and hold them to equivalent standards.","**Immediate actions:**\n- Notify all potentially affected customers promptly and advise them to rotate any exposed credentials or tokens.\n- Conduct an emergency review of what data each active third-party AI or analytics vendor currently holds on your behalf.\n\n**Long-term improvements:**\n- Establish a formal Third-Party Risk Management (TPRM) program that requires vendors to meet defined security standards before onboarding.\n- Apply data minimization principles so that vendors only receive the minimum data necessary to deliver their service.\n- Include contractual breach notification SLAs and audit rights in all vendor agreements covering personal or sensitive data.\n\n**Detection measures:**\n- Implement continuous monitoring of data flows to third-party vendors to detect anomalous access or exfiltration.\n- Require vendors to provide timely security incident notifications and validate their incident response capabilities during onboarding.",[12,13,14,15,16],"NIS2 Article 21(2)(d)","ISO\u002FIEC 27001:2022 A.5.19: Information security in supplier relationships","NIST SP 800-53 SA-9: External System Services","GDPR Article 28","CIS Control 15: Service Provider Management",{"GDPR Article 28":18,"NIS2 Article 21(2)(d)":19,"CIS Control 15: Service Provider Management":20,"NIST SP 800-53 SA-9: External System Services":21,"ISO\u002FIEC 27001:2022 A.5.19: Information security in supplier relationships":22},"Article 28 mandates that controllers only use processors who provide sufficient guarantees about data protection, and requires a binding contract specifying security obligations — gaps here enabled customer personal data to be exposed through the vendor.","This point specifically requires organizations to address security risks arising from supplier and third-party relationships, which is precisely what failed when Fireworks AI — a data processor for Notion — was compromised.","This control requires organizations to establish and maintain an inventory of service providers and assess their security practices, which would have identified Fireworks AI as a high-risk processor of sensitive customer data requiring heightened oversight.","SA-9 requires organizations to establish requirements for external service providers and monitor their compliance, which would have surfaced whether Fireworks AI maintained adequate controls over Notion's customer data.","This control requires organizations to define and implement processes to manage information security risks associated with suppliers, which would have included assessing and monitoring Fireworks AI's security posture before entrusting it with customer chat transcripts.","published","2026-11-12T12:21:15.642253+00:00","2026-11-12T12:21:15.592+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.securityweek.com\u002Fnotion-customer-data-compromised-in-fireworks-ai-hack\u002F","notion-customer-data-compromised-in-fireworks-ai-hack-a39fcf","Notion Customer Data Compromised in Fireworks AI Hack",[31,37],{"id":32,"name":33,"slug":34,"description":35,"color":36},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",{"id":38,"name":39,"slug":40,"description":41,"color":42},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[45,49,53],{"slug":46,"name":47,"problem":48},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":50,"name":51,"problem":52},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",{"slug":54,"name":55,"problem":56},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached."]