Notion announced on November 9 that Fireworks AI, a contractor responsible for its AI processing, experienced unauthorized access, potentially exposing some "Notion AI" chat records to third parties. Less than 1% of Notion workspaces were affected.

The affected data consists of chat records used by "Insights," a feature designed to understand Notion AI usage. For the majority of impacted workspaces, these records did not contain labels indicating the author or the specific workspace, nor did they include the execution results of tools invoked by the AI. However, information written directly in the chat body was included without alteration.

Notion contacted affected customers on November 9. Customers who received the notification can review the relevant records within their workspaces by following the instructions provided in the email. If authentication credentials such as passwords or API keys were pasted into Notion AI during the affected period, Notion advises changing or reissuing them.

Made with AI