Fireworks AI Security Breach Affects Under 1% of Notion Workspaces

At a glance

A security incident at Fireworks AI, a supplier to Notion's AI features, affected less than 1% of Notion workspaces. Notion has contacted the affected customers, and its investigation is still ongoing.

Key points

1. 1

   Users and workspace owners who were not contacted are not currently considered affected.

2. 2

   Affected customers were advised to immediately change any passwords or API keys (access codes for connecting outside programs) entered into Notion AI during the period.

3. 3

   Fireworks had promised not to store data, but the investigation found that data was stored at an endpoint Notion used.

4. 4

   As of November 3, Notion disconnected from Fireworks and deleted all data in that system.

Why it matters

It shows that when AI services rely on outside suppliers, a security problem at a supplier can expose user data.