Notion's AI dreams leaked by its own vendor — again

Notion, the popular workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed chat transcripts from Notion's AI assistant. The incident stems from a double breach at Fireworks: first in early October when hackers accessed environment variables and API keys, and again on October 23 when an attacker infiltrated Fireworks' development environment via a third-party cloud provider. The exposed data included resource metadata, billing info, model weights, and datasets—including Notion AI chat transcripts used for the 'Insights' feature, which gives workspace admins visibility into team AI usage.

For engineers, this is a classic case of third-party supply chain risk: Notion outsourced AI processing to Fireworks, which then got hacked twice in a month. The transcripts were reportedly 'unattributable' (not labeled with user or workspace details) and didn't include tool call results, but the breach still exposes sensitive internal conversations. Notion's response—cutting off Fireworks traffic, deleting data, and disabling Insights—highlights the reactive scramble after a vendor fails to secure its systems. The takeaway? Your AI features are only as secure as your vendor's worst breach—and Fireworks just provided a masterclass in how to leak customer data twice before Thanksgiving.