Notion Labs: Fireworks.ai breach may expose Notion AI chat logs

The exposure traces back to a third-party contractor rather than Notion's own systems: Fireworks.ai, which Notion relies on for its AI service, suffered unauthorized access, and the chat logs tied to the Insights analytics feature are what may have leaked. Notion Labs put the scope at under 1% of all workspaces, a narrow slice, but one that still involves real usage records.

A detail that complicates the picture is labeling. Notion says most of the affected workspaces carried no label identifying their users, which could make it harder to tell whose activity a given log reflects. At the same time, the logs themselves may contain information about users, so the absence of a label does not necessarily mean the records are anonymous.

Notion has already contacted the users it believes are in scope and is directing them to refresh any confidential information or credentials that appeared in the possibly exposed chats. The company's Japanese X account also posted about the matter on November 11 (Japan time) and pointed users to email for unanswered questions, suggesting the company is still fielding inquiries as affected users assess what they had shared.