Fireworks cloud intrusion exposed customer data including Notion AI transcripts
Fireworks disclosed a later intrusion through its R&D cloud provider and confirmed access to some customer datasets and incomplete weights. Notion found Insights chat transcripts for fewer than 1% of workspaces and notified affected customers.
- Disclosed
- Nov 9, 2026
- Public disclosure date
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- Fireworks customers named in exposure notices and notified Notion workspaces with affected Insights transcripts.
- AI · SaaS · data breach
- In the wild
- Yes
- Fireworks and Notion confirmed unauthorized access to affected customer data.
What happened
Fireworks says an October 23 incident at its R&D cloud host enabled access to its development machines on October 24. Its investigation found affected resource metadata and billing details, including addresses, payment history, balances and credit usage. Fireworks says payment card numbers were outside scope. It temporarily disabled self-serve dataset uploads and downloads for Batch Inference and dataset-based training. It reports no detected impact to Inference, Training SDK or Nexus in its investigation to date.
Notion says it disconnected from Fireworks by November 3 following a notification about synthetic test data. Fireworks notified Notion again on November 6 and confirmed a separate dataset on November 8. Notion says most affected workspaces’ transcripts lacked author or workspace labels and contained no tool-call results. The chat text itself could contain identifying information or secrets. Notion disabled Insights and continues investigating. The sources do not establish a count of affected people.
Crime-scene timeline
Oct 9, 2026
Fireworks publishes an earlier security bulletin
Fireworks initially confirms access to stored secrets used in workflows including evaluation jobs.
Oct 23–24, 2026
Cloud provider incident leads to Fireworks development access
Fireworks detects an unauthorized workload on October 24 and starts containment.
Nov 9, 2026
Fireworks and Notion publish scope findings
Fireworks details additional data categories. Notion describes the Insights transcript exposure and notification process.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Fireworks November 9 bulletinPrimaryDescribes the October cloud-provider intrusion, data categories, mitigation and ongoing investigation.
- Notion security noticePrimaryExplains the affected Insights transcripts, workspace notifications and credential guidance.