Notion says a vendor breach exposed Notion AI chat transcripts for fewer than 1% of workspaces
Source: notion.com (opens in a new tab)
What changed: Fireworks AI, one of Notion's AI vendors, had a security incident. Notion says it exposed Notion AI chat transcripts for fewer than 1% of workspaces. Notion stopped sending data to Fireworks on 3 November.
Why it matters: A transcript holds whatever a person typed into the chat. That can include a password, an API key or client data. Notion tells owners to "treat this data as if it were exposed".
What to do: Ask your team today if anyone pasted a password or an API key into Notion AI. Rotate each one now, and do not wait for an email from Notion. Owners can review the affected chats under "?" and "Security incident review" in the sidebar.