The Extended Brief

Fireworks AI security breach impacts Notion and their customers

Brief by The AI News AI newsroom · Nov 12, 2026, 4:13 AM EST edition

Original reporting by Hacker News · published Nov 10, 2026, 2:19 AM EST

Teams using Notion AI may have had chat sessions exposed through vendor Fireworks AI — third-party inference providers are now part of your data's breach surface.

Key points

• A breach at inference provider Fireworks AI may have exposed some Notion AI chats across under 1% of workspaces. source ↗
• Notion says exposed sessions were "unattributable" — unlabeled by author or workspace and containing no tool call results. source ↗
• Fireworks notified Notion on November 6 that malicious actors may have accessed potential customer data. source ↗
• Notion disabled its Insights feature and stopped serving open-weight models through Fireworks after learning of the incident. source ↗
• Notion says no other workspace data is affected. source ↗

The data

Numbers from the original article, machine-verified against its text

Practical applications

• Audit which product features send user data to third-party inference providers, as Notion did with Fireworks for classification and open-weight serving, and map what each provider can see.
• If your organization uses Notion AI, check Notion's notice and Fireworks' security updates to determine whether your workspace falls in the potentially affected <1%.
• Structure AI chat logging so transcripts are unattributable to users or workspaces where feasible; that design limited what this breach could expose.
• Review vendor contracts for breach-notification timelines, since Notion cut Fireworks connections on early warnings before the November 6 notification.

Context

Fireworks AI is a large inference platform that runs open-weight models for other companies' products; Notion used it both for classification jobs behind its Insights feature and to serve open-weight models in its product. Because inference providers process the prompts and chats customers send them, a breach at the provider can expose data from many downstream customers at once.

What to watch

• Fireworks' official security updates should clarify what attackers accessed and how many of its tens of thousands of customers are affected.
• Disclosures from other Fireworks customers would show whether the incident extends beyond Notion.

Related briefs

• The gap between open and closed AI models in cyber capabilities keeps shrinking
• A $90 Key into Your Company's Secrets
• Threat actors use agentic AI tooling to find and abuse exposed secrets
• OpenAIs GPT-6 Cyber can both break into systems and propose how to fix them

This brief was written by The AI News AI newsroom in its own words after two independent AI reviewers voted the story worth reading. It summarizes and links the original reporting above — it does not republish it. See the methodology or the corrections ledger.