Notion’s incident shows why the inference supplier belongs in your data map
Notion says a Fireworks security incident exposed a subset of Insights chat transcripts affecting fewer than 1% of workspaces; the affected route was disconnected on November 3.
The brand on an AI interface is not necessarily the only company handling the conversation.
Fireworks’ November 9 incident update and Notion’s customer advisory show the consequence: some Notion Insights transcripts were affected by a security incident at the third-party AI supplier. Notion puts the affected population below 1% of workspaces. [1][2]
Notion says it ended all Fireworks communications on November 3 and contacted affected customers on November 9. Its secure workspace notice lets those customers inspect the relevant transcripts. Most affected chats were not attributable to specific people, according to Notion; that does not mean every transcript was free of personal information or secrets. [2]
The immediate action is narrow: notified customers should review the identified material and rotate credentials if they pasted any into the affected chats. Notion does not currently prescribe action for customers who were not notified. The broader purchasing lesson is to ask which model supplier receives each feature’s data, what it retains, and how a supplier can be disconnected without losing the entire product. [2]
Take it further
Read Notion’s affected-customer guidance Affected customers were notified and can inspect a secure transcript list. Review exposed secrets and rotate them if present. Notion specifies no action for unnotified users; no deadline.
Sources & details 2 sources
Discuss in your voice app
Take the reporting, visual explanations and original sources into a conversation. Copy the brief, paste it into your preferred assistant, then start its voice mode.
Paste the brief into your voice app to discuss this reporting.Reporting sources
- Fireworks — November 9 incident update
Nov9 update: Oct23 third-party incident and Oct24 access to an R&D machine; limited account billing/secrets/datasets/incomplete models. No additional platform access detected since Oct25. Company reports no detected impact on Inference/Training SDK/Nexus; investigation ongoing. Batch dataset transfers disabled.
- Notion — customer security advisory
Independent customer confirms subset of Insights chat transcripts affected, under 1% of workspaces; most unattributable is not no personal information. Disconnected ALL Fireworks communications Nov3. Contacted affected users Nov9. Nov10 update clarified language without changing incident facts (footer Nov11). Affected users can inspect secure transcript list and rotate any exposed credentials; unnotified users no action currently specified.
Images & figures
Notion disconnected Fireworks on November 3; the disclosed incident affected fewer than 1% of workspaces.
Euangelion · Source · Usage terms