Knowledge base application Notion reports less than 1% workspace AI conversation leaks

The knowledge management application Notion has released an announcement acknowledging that some users' AI chat records have been leaked. The company stated that the affected workspaces account for less than 1% of all workspaces and is currently notifying the affected users. If users have provided their account, password, or credentials to the AI, Notion recommends treating them as compromised, immediately checking the login records of the relevant accounts, and changing passwords or credentials.

The source of this incident is a hacker attack on the service provider Fireworks. Notion uses Fireworks AI to process data for a feature called Insights, which helps workspace administrators understand how team members are using AI. To generate this analytical data, Notion sends the saved AI conversation content to Fireworks for processing. Fireworks has also served as the inference service provider for some open-weight models in Notion's products.

Notion stated that the potentially leaked data mainly consists of user chat records, including the chat content input by users and the replies given by the AI. The announcement explained that some users may have sent their account, password, or various credentials to the model while using AI. Notion advises the relevant users to immediately change these passwords or credentials and check for any unusual activity in their account login records.