All-in-one collaborative workspace and productivity platform Notion is notifying a small set of customers that their information was compromised in a data breach involving Fireworks AI.
A cloud platform for running and fine-tuning open source AI models, Fireworks AI was hacked twice in October: once through compromised internal credentials, and once through a third-party cloud provider that was hosting Fireworks R&D machines.
The second incident, linked to a recent rise in LLMJacking activity, occurred on October 24, when the attackers executed an unauthorized workload leading to the compromise of customer data.
Fireworks contained the incident the same day and notified Notion on November 2 that Notion AI data had been accessed. Prior to the incident, Notion used Fireworks as a general inference provider for delivering open-weight models.
Notion’s investigation into the compromised data determined that the hackers accessed Notion AI chat transcripts used for the Insights feature, which helps customers understand their AI usage.
Fewer than 1% of Notion workspaces were affected, and most of the transcripts were unattributable to a customer or the workspace they came from.
“Beyond what’s in the chat transcript itself, there’s no information tying the chat back to workspaces, users or companies,” Notion says.
The company has contacted the affected customers with instructions on how to securely retrieve and review the data in their workspaces, but did not disclose how many customers were affected.
“We recommend treating this data as exposed. If you pasted sensitive information, passwords, API keys, or other credentials into Notion AI during the incident, rotate any exposed credentials,” Notion tells customers.
SecurityWeek has emailed Notion for additional information on the data breach and will update this article if the company responds.
Related: Hackers Deploy Malware in Fresh ScreenConnect Campaign
Related: Maersk Confirms Data Theft Amid $5 Million Extortion Attempt
Related: Hackers Target N-central Zero-Days as N-able Rushes Patches
Related: Malicious Claude Code Extension Served in Cursor Supply Chain Attack
