Notion AI chat logs may have leaked via Fireworks.ai breach

The incident traces back to Notion Labs' November 9 disclosure that unauthorized access at its contractor Fireworks.ai may have exposed chat records tied to Insights, the feature that analyzes how Notion AI is used. Because Insights processes records drawn from customers' own workspaces, the exposure reaches into the content companies typed into Notion AI rather than staying confined to Notion's own systems.

The Japanese reports show how that plays out at the customer level. SecureNavi cited client company names, contact names and the content of inquiries and consultations, including meeting discussion. LRM put a time window on its exposure, saying records created in its workspace between October 5 and 24 and used in Insights processing may have leaked. Feger pointed to names of contacts at business partners.

None of the three has confirmed the full scope; each says it is still checking and will contact customers individually if their information was involved. All three are also warning about suspicious emails and calls that impersonate Notion or the companies themselves, suggesting the concern extends beyond the leaked records to follow-on targeting of the customers named in them.