Notion, the online document editor and notetaker, is a confirmed victim of the Fireworks AI breach that AI Insiders covered on November 10. TechCrunch reported Thursday that the intruders took chat transcripts from Notion AI customers who used the Insights feature. Notion says about 1% of its customers were affected.
Notion’s disclosure says each transcript contains both what users typed and what the model returned. Much of the data cannot be traced to a specific customer. On November 3, Notion cut all connectivity with Fireworks and deleted the data held in its own systems.
Fireworks says the attacker got in by breaching its cloud provider, which opened a development system and led to stolen billing information and some datasets. It believes the group is financially motivated and sells access to model usage. Fireworks counts Harvey and Cursor among its customers, and TechCrunch notes this is its second breach in two months.
Any team that routes user prompts through a third-party inference host now has a concrete risk to price: chat logs are only as safe as that vendor’s weakest cloud supplier.
Reported by TechCrunch on November 12, 2026.
