Notion account of AI Insights transcripts affected in Fireworks incident

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsFireworks AI breach expanded from evaluation secrets to customer datasets and billing records: Notion says its Fireworks notification progressed from synthetic testing data on November 2 to possible customer data on November 6 and a final dataset on November 8; Notion contacted affected users November 9.

  Chronology table for Nov 2, 3, 6, 8 and 9, and AI Insights transcript paragraph

• supportsFireworks AI breach expanded from evaluation secrets to customer datasets and billing records: Notion reports that it disconnected its Fireworks integration, revoked exposed Notion API credentials on November 11 and separately notified third-party API providers about potentially exposed credentials. The notices do not demonstrate actual misuse of each key.

  Notion third-party vendor security advisory, November 11 and later follow-up entries

• supportsFireworks AI breach expanded from evaluation secrets to customer datasets and billing records: Notion confirmed AI Insights transcripts in the Fireworks-exposed dataset, impacting fewer than 1% of Notion workspaces; most were unattributable and lacked tool call results.

  Updated version November 10: affected workspaces and analysis of the November 8 dataset