CryptoSlate
Notion revoked exposed API keys on Nov. 11 after finding them in user messages affected by a breach at AI supplier Fireworks AI. The incident affected fewer than 1% of Notion workspaces and exposed chat transcripts used for its Insights feature. Notion's advisory does not report misuse of the revoked keys.
Why it matters
For the vast majority of affected workspaces, the transcripts lacked labels identifying their authors or workspaces and contained no tool-call results. But message text could still identify a user, workspace or company, or contain credentials.
Notion API tokens let software access workspace data within the permissions granted by their owners. Depending on those permissions, someone holding a token could access or change content. Notion advises affected customers to review the impacted data securely in their workspaces and rotate passwords, API keys and other credentials pasted into Notion AI during the incident timeframe.
Market impact
The breach disrupted Notion's AI offering: the company disabled Insights during its investigation and stopped serving open-weight models through Fireworks. It says no other Notion features were affected and that it has contacted customers identified as affected.
Notion says it disconnected from Fireworks and deleted data held in its system by the morning of Nov. 3, after an initial notification appeared to involve synthetic test data only. Fireworks notified Notion of potential customer-data access on Nov. 6 and confirmed the new dataset on Nov. 8.
Fireworks separately reported impacts including resource metadata, billing information, secrets, datasets and incomplete model weights for a limited set of accounts. Its investigation continues.
Frequently asked questions
-
How many Notion workspaces were affected by the Fireworks AI breach?
Notion says the incident affected fewer than 1% of its workspaces.
-
What could someone do with an exposed Notion API key?
A token can make requests within its assigned capabilities and content permissions. Depending on those permissions, its holder could access or change workspace content.
-
Why can unlabeled Notion AI transcripts still expose sensitive data?
Even without author or workspace labels, the message text could contain credentials or information identifying a user, workspace or company.
-
What should affected Notion customers do with credentials pasted into AI chats?
Notion recommends reviewing the impacted data securely in the workspace and rotating passwords, API keys and other credentials pasted into Notion AI during the incident timeframe.
-
Which Notion AI service changes followed the Fireworks incident?
Notion disabled Insights during its investigation and stopped serving open-weight models through Fireworks. The company says no other Notion features were affected.
Crypto News
CoinDesk
Crypto Rank News
CoinTelegraph
WuBlockchain
TheBlock
Crypto Capital Venture