TL;DR
Was my Notion AI chat leaked in the Fireworks AI breach?
A breach at Fireworks AI, a company Notion used for one AI feature, exposed Notion AI chats from fewer than 1% of workspaces. If Notion hasn't contacted you, it says no action is needed. If it has, or you ever pasted passwords or keys into Notion AI, change them today.
What happened at Notion and Fireworks AI?
Notion published a security advisory on Thursday, November 12, 2026, and updated it today. It says a breach at Fireworks AI exposed Notion AI chat transcripts from fewer than 1% of Notion workspaces. Fireworks AI is an AI infrastructure company, meaning it runs AI models on its own servers for other businesses.
The exposed chats were the ones Notion used for its "Insights" feature, which helps customers understand how their teams use Notion AI. Notion says that for most affected workspaces the chats were "unattributable," so they weren't labeled with who wrote them or which workspace they came from. Notion also says its own systems were not breached.
Fireworks' own bulletin says an attacker broke into its cloud provider to reach a Fireworks development system, and took billing information and some datasets. TechCrunch reports this is Fireworks' second breach in two months.
When did Notion find out, and what has it done?
| Date (2026) | What happened, per Notion |
|---|---|
| Nov 2 | Fireworks first told Notion that data was accessed |
| Nov 3 | Notion disconnected from Fireworks |
| Nov 4 | Notion deleted its data from Fireworks' system |
| Nov 6 | Fireworks said customer data may have been accessed |
| Nov 8 | The affected dataset was confirmed |
| Nov 9 | Notion contacted affected customers |
| Nov 11 | Notion revoked exposed Notion API keys it found in affected chats |
| Nov 12 | Notion reported exposed third-party API keys to the companies that issued them |
Notion has also turned off Insights and stopped serving open-weight models (AI models whose inner settings are published so anyone can run them) through Fireworks. An API key is a long password that lets one app use another app's account, so a leaked one can run up bills or open data in someone else's name.
Am I affected, and what should I do?
Notion's line is clear: if you haven't heard from it, your workspace hasn't been identified as affected and you don't need to do anything right now. If you did get a notice, Notion asks you to treat the data as exposed and rotate (replace with new ones) any passwords, API keys or other credentials you pasted into Notion AI.
Even if you weren't hit, this is a good week to think about what goes into AI chats at work. You chose Notion, but your chats passed through a company most Notion users had never heard of. Our Practical View on what not to paste into an AI chat has the full checklist.
X reactions
Small accounts were first to turn the news into advice:
Notion says about 1% of its customers had Notion AI chat transcripts taken in a breach at Fireworks AI, a model provider it used (TechCrunch).
— Mark Holloway (@0xKetone) November 13, 2026
Your AI vendor's vendors sit in your data path too. This week, list every model provider your prompts touch and what each one keeps.
your AI chats can leak through a company you've never heard of.
— Sagar Tanur (@Sagarvd01) November 13, 2026
Notion says a breach at Fireworks AI, a vendor it used for one AI feature, exposed Notion AI chat transcripts from a small number of workspaces. Notion had a zero data retention commitment from them. the data still got out.
if you ever pasted a password or API key into an AI chat, that's the one to rotate.
Our take
Notion moved fast once it knew. It cut the connection the day after Fireworks called, deleted its data, revoked keys it found and even reported other companies' leaked keys to them. That's how a company should handle a vendor breach, and the notice is plain enough for anyone to follow.
The bigger lesson is uncomfortable. Every AI feature in a tool you pay for may send your words to another company, and most of us never check. We'd like every work app with AI to publish a simple list of the AI vendors it uses and what each one keeps. Until that's normal, keep passwords and keys out of chat boxes entirely.
— Artificially Nerdy
What to do this week
- Check your email for a notice from Notion, including the inbox of whoever owns your workspace.
- Rotate anything secret you ever pasted into Notion AI: passwords, API keys, card numbers.
- Search your Notion pages for "password", "key" or "token" and move anything you find into a password manager.
- Tell your team that AI chat boxes aren't the place for logins or client details.
- Ask your other work apps which outside AI companies handle your data. Read our guide to locking down AI API keys while you're at it.
FAQ
Was Notion itself hacked?
No. Notion says its own systems weren't breached. The attacker got in through Fireworks AI's cloud provider and reached a Fireworks system that held some Notion AI chats.
Can I still use Notion AI?
Yes. Notion turned off only the Insights feature and stopped using Fireworks for open-weight models. Other Notion AI features keep working.
Who was behind the attack?
Neither company has named anyone. TechCrunch reports the attackers' goal appears to be selling stolen access to AI models.
Does this affect other Fireworks AI customers?
Fireworks says billing information and some datasets were taken. Neither Notion nor Fireworks has named other affected customers, so check with any service you use that runs on Fireworks.
Sources
- Notion: Fireworks AI incident — November 12, 2026, updated November 13. Fewer than 1% of workspaces, Insights, timeline, revoked keys, advice to rotate credentials.
- Fireworks AI: security incident update — How the attacker got in and what was taken.
- TechCrunch: Cyberattack on Fireworks AI allowed hackers to access Notion customers' chat transcripts — November 12, 2026. Second Fireworks breach in two months; attackers' likely goal.
- Mark Holloway on X — November 13, 2026, 4:13am ET.
- Sagar Tanur on X — November 13, 2026, 3:14am ET.
