Fireworks AI Security Breach Impacts Notion and Exposes Sensitive Customer Data
A security incident at AI infrastructure provider Fireworks AI has compromised Notion workspaces and billing data.
1Security Incident Scope
Fireworks AI suffered a significant security breach affecting its infrastructure, which subsequently impacted Notion workspaces. Notion confirmed that 1% of its workspaces were exposed to the incident. The breach involved unauthorized access to internal development environments, leading to the potential exposure of customer data, including chat transcripts and sensitive account information.
2Notion Data Exposure
Notion AI chat transcripts used for the Insights feature were accessed during the breach. Notion classifies this data as unattributable, meaning transcripts lacked labels identifying specific users or workspaces. While no other workspace data was affected, Notion advises users to rotate credentials if sensitive information like passwords was shared in chats.
3Fireworks AI Breach Details
The breach originated from unauthorized access to Fireworks development machines via a third-party cloud provider on October 23, 2026. Attackers utilized stolen internal credentials to run unauthorized workloads. This resulted in the exposure of account billing information, secrets, datasets, and incomplete models for a limited set of customer accounts.
4LLMjacking Threat Mechanism
The incident is linked to a cybercriminal activity known as LLMjacking. This involves hijacking large language models using stolen credentials to fuel illicit enterprises. Attackers sell access to these models to other threat actors, effectively leaving the legitimate account owner to pay the associated infrastructure and usage bills for the unauthorized activity.
5Notion Response Actions
Notion terminated all connections to Fireworks AI systems on November 3rd and deleted all data stored within the vendor's environment. The company disabled the Insights feature and stopped serving open-weight models through the platform. Notion has contacted affected workspace owners, providing them with tools to review the specific data impacted by this breach.
6Data Review Process
Affected Notion workspace owners can access a security incident review page via the desktop app or web browser. The platform provides a CSV file of impacted data and an annotated version containing metadata for internal analysis. These resources are restricted to workspace owners and are not currently accessible through the mobile application.
7Fireworks Security Hardening
In response to the breach, Fireworks AI revoked compromised internal credentials and rotated service account tokens. The company implemented security hardening procedures, including isolating affected systems to prevent lateral movement and tightening access controls. They also enhanced logging and monitoring systems to detect further unauthorized activity on their AI infrastructure platform.
8Broader Industry Implications
This incident highlights the growing risk to AI infrastructure, with Google recently warning that threat actors are increasingly targeting these services globally. Sectors such as financial services, retail, and technology are particularly vulnerable. Organizations must prioritize identity visibility and assess AI threat readiness to defend against emerging hijacking tactics and credential theft.