# Hackers accessed Notion AI chat logs via Fireworks AI breach

> A cyberattack on Fireworks AI let attackers steal billing info and Notion AI chat transcripts, affecting about 1% of Notion users.

Oossa · 2026-11-12 · https://oossa.com/en/hackers-accessed-notion-ai-chat-logs-via-fireworks-ai-breach

Fireworks AI, a cloud platform that lets developers run large language models, suffered a breach that exposed some customer data. The attackers first broke into Fireworks' cloud provider, then moved into a development system where they could see billing details and datasets. Notion, the popular note‑taking app, confirmed that the breach gave the hackers access to chat transcripts from its Notion AI “Insights” feature.

Notion said the breach affected roughly 1% of its workspaces. The company disconnected from Fireworks on 3 November, erased the data stored on Fireworks’ side, and stopped all communication. It later learned that the stolen transcripts were largely unattributable – they did not contain user names, workspace IDs, or tool‑call results.

## What was taken and why it matters

Firewalls reports that the attackers also grabbed billing information for some Fireworks customers. The company believes the motive is financial, aiming to sell access tokens for large language models so others can run AI workloads without paying for their own compute.

Notion’s investigation showed the leaked data were only the chat logs themselves, not any linked personal identifiers. Still, the logs could include sensitive text that users typed into Notion AI, such as passwords or API keys. Notion has advised affected users to treat the data as exposed and rotate any credentials that may have been shared.

## Background on Fireworks AI incidents

This is the second security incident at Fireworks AI within two months; an earlier breach was reported in October. The recurring problems highlight how many AI services depend on third‑party cloud providers, and how a compromise of one vendor can spill over to its customers.

## The facts

- Fireworks AI was breached through its cloud provider, giving attackers access to a development system (TechCrunch).
- Notion confirmed that about 1% of its workspaces were affected by the breach (TechCrunch).
- The breach exposed Notion AI chat transcripts from the “Insights” feature, most of which were unattributable (Notion advisory).
- Notion disconnected from Fireworks and deleted the stored data on 3 November 2026 (Notion advisory).
- Fireworks says the attackers are financially motivated and likely intend to sell AI model usage tokens (TechCrunch).

## Why it matters

If you use Notion AI, any text you typed into the chat could have been seen by the attackers, so you may need to change passwords or API keys you entered there. The incident also shows that a breach at one AI infrastructure provider can expose data from many downstream apps, underscoring the importance of supply‑chain security.

## Sources & references

1. [Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts](https://techcrunch.com/2026/11/12/cyberattack-on-fireworks-ai-allowed-hackers-to-access-notion-customers-chat-transcripts/) – TechCrunch, 2026-11-12
2. [Notion](https://www.notion.com/en-gb/security/advisories/security-incident-involving-a-third-party-ai-vendor) – Notion

Last updated: 2026-11-12