Updates
- Investigating
On November 11, we revoked exposed Notion API keys that were found in affected user messages during our investigation.
Fireworks AI incident (11-10)
InvestigatingUpdated version: November 10, 2026.
This post informs you about the recent Fireworks AI Incident and how it’s impacting <1% of Notion workspaces. For the latest on the Fireworks AI incident, please see their official updates here.
We have contacted our customers who were affected by the Fireworks incident. If you haven't heard from us, we haven't identified your workspace as affected, and no action is needed right now. Our investigation is ongoing. If we determine that your workspace was impacted, we will contact you directly.
What happened and how we addressed it:
| Date | Update |
|---|---|
| November 2 | On the evening of November 2, Fireworks notified Notion that a small set of data had been accessed by malicious actors. Upon investigation, the dataset included Notion AI synthetic testing data, and no Notion AI customer data was involved. |
| November 3 | Out of an abundance of caution, by the morning of November 3, Notion disconnected its systems from Fireworks, deleted all data in the Fireworks system, and stopped all communication between its systems and Fireworks. |
| November 6 | On November 6, Fireworks notified Notion that malicious actors may have accessed potential customer data. Notion immediately began another internal investigation. |
| November 8 | On November 8, Fireworks confirmed the final impacted dataset. |
| November 9 | On November 9, Notion reached out to impacted customers. |
Upon analysis of the dataset Fireworks AI gave us on November 8, we discovered that it included Notion AI chat transcripts used for the Insights feature, which for the vast majority of impacted workspaces were unattributable. "Unattributable" means the chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results. Beyond what’s in the chat transcript itself, there’s no information tying the chat back to workspaces, users, or companies.
No other Notion features were affected, and we continue to monitor this incident.
What is Fireworks AI and how we used them: Fireworks is one of the most used global AI infrastructure platforms powering tens of thousands of customers and used by hundreds of thousands of developers. We used Fireworks for classification jobs to help customers understand their own AI usage through a feature in Notion called Insights, and we used them as a general inference provider to serve open-weight models inside our product. The Insights feature has been disabled as we investigate this incident, and we are no longer serving open-weight models through Fireworks.
What we recommend for affected customers: Affected customers are able to retrieve and review the impacted data securely inside their workspace, with instructions sent via email. We also recommend that affected customers treat this data as if it were exposed. If those with affected workspaces have pasted sensitive information, passwords, API keys, or other credentials into Notion AI during the timeframe of the incident, rotate them.
We will update this page as we learn more.
We take your privacy and the security of your data seriously. Even though this was not a breach of our systems, keeping your data safe is fundamental to using Notion for your life’s work. It is our mission to make sure this never happens again. We will raise the standard for how your data is protected.
On November 10, we updated this post for style and clarity in response to customer questions and feedback. No changes have been made to previously reported facts. View the previous version of this article.
Originally published