Updates
- Investigating
On 11 November, we revoked exposed Notion API keys found in affected users’ messages during our investigation.
Fireworks AI incident
InvestigatingUpdated version: 10 November 2026.
This post explains the recent Fireworks AI incident and how it’s affecting <1% of Notion workspaces. For the latest updates, see Fireworks AI’s official updates here.
We have contacted our customers who were affected by the Fireworks incident. If you haven't heard from us, we haven't identified your workspace as affected, and no action is needed right now. Our investigation is ongoing. If we determine that your workspace was impacted, we will contact you directly.
What happened and how we addressed it:
| Date | Update |
|---|---|
| 2 November | On the evening of 2 November, Fireworks notified Notion that malicious actors had accessed a small set of data. An investigation found that the dataset included synthetic Notion AI test data, but no Notion AI customer data. |
| 3 November | As a precaution, by the morning of 3 November, Notion had disconnected its systems from Fireworks, deleted all data in the Fireworks system and stopped all communication between its systems and Fireworks. |
| 6 November | On 6 November, Fireworks notified Notion that malicious actors may have accessed customer data. Notion immediately began another internal investigation. |
| 8 November | On 8 November, Fireworks confirmed the final dataset affected. |
| 9 November | On 9 November, Notion contacted affected customers. |
After analysing the dataset Fireworks AI gave us on 8 November, we found that it included Notion AI chat transcripts used for the Insights feature. For the vast majority of affected workspaces, these transcripts were unattributable. “Unattributable” means the chats weren’t labelled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results. Beyond what’s in the chat transcript itself, there’s no information tying the chat back to workspaces, users or companies.
No other Notion features were affected, and we continue to monitor this incident.
What is Fireworks AI and how we used them: Fireworks is one of the most used global AI infrastructure platforms powering tens of thousands of customers and used by hundreds of thousands of developers. We used Fireworks for classification jobs to help customers understand their own AI usage through a feature in Notion called Insights, and we used them as a general inference provider to serve open-weight models inside our product. The Insights feature has been disabled as we investigate this incident, and we are no longer serving open-weight models through Fireworks.
What we recommend for affected customers: We’ve emailed affected customers instructions for securely retrieving and reviewing the data in their workspace. We recommend treating this data as exposed. If you pasted sensitive information, passwords, API keys or other credentials into Notion AI during the incident, rotate any exposed credentials.
We will update this page as we learn more.
We take your privacy and the security of your data seriously. Even though this was not a breach of our systems, keeping your data safe is fundamental to using Notion for your life’s work. It is our mission to make sure this never happens again. We will raise the standard for how your data is protected.
On 10 November, we updated this post for style and clarity in response to customer questions and feedback. The facts we previously reported have not changed. View the previous version of this article.
Originally published