Yayoi, a company specializing in accounting software, announced on November 12 that content entered by employees into the internally used "Notion AI" and some of the AI's responses may have been leaked externally. The company stated that customer-facing services, such as Yayoi's accounting services, are not affected.
The cause is unauthorized access to U.S.-based Fireworks AI, a subcontractor of Notion. Fireworks AI reportedly stored input content and responses from Notion AI in violation of its data retention policies, and a third party may have accessed this data.
The affected data includes a portion of conversation records created between October 5 and 24, specifically those used for processing "Insights," which analyzes AI feature usage. Yayoi is investigating the number of affected items and their detailed content, as they may contain information related to business partners and employees.
According to Yayoi, systems that handle customer data are separate from the Notion instance used internally. As of the announcement, it has not been confirmed that the potentially leaked conversation records contained any customer personal information or authentication credentials.
Made with AI
