Notion says Fireworks AI breach exposed chat transcripts

Notion disclosed on 11 November 2026 that a security breach at Fireworks AI, the company that provides part of its AI infrastructure, exposed Notion AI chat transcripts belonging to a small number of customer workspaces, according to a report by BleepingComputer.

Notion is a digital workspace platform used for notes, documents and project tracking. Notion AI is the assistant built into that product, and the chat transcripts are the records of what users typed to the assistant and what it replied. Those transcripts can contain whatever a user pasted or asked about, which in a workspace tool may include internal documents or working notes.

The incident is a supply chain problem rather than a flaw in Notion's own systems. Fireworks AI supplies AI infrastructure that Notion relies on, so data handled on Notion's behalf sat inside a third party's environment. When that environment was breached, the exposure reached Notion customers without any action on their part.

According to BleepingComputer, Notion described the number of affected workspaces as small. The company has not, in the reporting available, said when the breach occurred, how the attackers got in, how long they had access, or whether the exposed transcripts were copied or published. There is no indication in the reporting that Notion account credentials, payment data or stored documents outside the AI transcripts were involved.

The pattern is familiar to anyone tracking AI assistants built on outsourced model hosting. An assistant that appears to be a single product is often a chain of suppliers, and prompts and responses travel along that chain. Customers who assess the security of the vendor they bought from do not always have visibility into the providers sitting behind it.

Organisations that use Notion AI may want to consider what staff have typed into the assistant, on the assumption that transcripts could have been readable by someone else. That is a judgement for each customer to make; the reporting does not say which workspaces were affected or whether Notion has contacted them individually.

Neither Notion nor Fireworks AI has published further technical detail in the reporting reviewed. The incident status remains as reported, and the account above reflects what Notion has disclosed so far. Further information would need to come from the two companies.