Notion disclosed that a security breach at Fireworks AI exposed some of its users' AI chat transcripts.^[1] Fireworks experienced two data breaches during October.^[2] The timeline Fireworks had an earlier breach in early October.^[3] A second, on 23 October, came through a third-party cloud provider.^[4] Notion received its first alert from Fireworks, about exposed test data, on 2 November.^[5] It cut traffic to Fireworks and deleted the data held by the vendor by 3 November.^[6] Fireworks confirmed on 8 November that customer data, including that of Notion users, had been accessed.^[7] Laid end to end, that is ten days from the second breach to the first alert, and sixteen to confirmation. What was taken Hackers stole billing information and AI-related data from Fireworks.^[8] A limited number of its customer accounts were affected.^[9] All of them have been notified.^[10] On Notion's side, the exposed transcripts came from a dataset called Insights, which is now disabled.^[11] Less than 1% of Notion users are affected.^[12] What to do Notion advises affected users to rotate any passwords and API keys that appeared in their chats.^[13] Users who received no notice need take no action, the company says.^[14] The supplier Fireworks was founded in 2022 and is based in San Mateo.^[15] It hired Palo Alto Networks' Unit 42 to investigate.^[16]