Overview of the Incident
Notion has announced that a security breach at Fireworks AI, its AI infrastructure provider, exposed customer chat transcripts in a small number of Notion workspaces. This incident follows a series of breaches, including one in early October where hackers accessed environment variables containing API keys and tokens for some accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled.
Details of the Breaches
Fireworks AI experienced two separate breaches. The first occurred on October 23, where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. The second breach occurred in early October, when hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled.
Impact and Response
Notion stated in an update that upon analysis of the dataset Fireworks AI provided on November 8, they discovered that it included Notion AI chat transcripts used for the Insights feature. These transcripts were unattributable, meaning they were not labeled with who wrote them or which workspace they came from, and did not contain tool call results. Notion has published a FAQ page about the incident, highlighting that Fireworks had contractually committed to zero data retention for Notion data. The company also advised affected users to rotate any passwords, API keys, or other credentials entered into affected chats. Notion stated that less than 1% of its users are impacted by the incident and that potentially affected workspace owners should review the data through Security incident review in Notion’s desktop web interface and share a link with members that lets them download their own transcripts. Notion advises affected users to rotate any passwords, API keys, or other credentials entered into affected chats.
Additional Information
Notion is a cloud-based workspace used for note-taking, document creation, internal wikis, project management, and task tracking. It includes an AI assistant that can answer questions, summarize content, and help draft text. Fireworks AI enables Notion to run some of the open-weight models available through Notion AI and analyze stored conversations for Insights, a feature that gives workspace administrators visibility into how their teams use AI. Fireworks AI discloses new breach after cloud provider hack. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users. The exposed transcripts came from the Insights dataset, which has now been disabled. Notion is a digital workspace platform that includes an AI assistant for answering questions, summarizing content, and helping draft text. Fireworks AI, its AI infrastructure provider, experienced a breach where an attacker accessed its development environment via a third-party cloud provider, compromising resource metadata, billing information, model weights, and datasets for some customers. Fireworks AI also experienced a breach in early October where hackers accessed environment variables containing API keys and tokens for a limited number of accounts. Notion learned about the exposed chat transcripts after receiving an alert from Fireworks on November 2, which indicated an exposed dataset containing synthetic test data. Notion responded by cutting off traffic to Fireworks, deleting all data from the vendor’s systems, and halting training runs by November 3. However, Fireworks confirmed on November 8 that customer data had been accessed, including that of Notion users.
Comments