[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_3bEvcz9u0L8mJN3B8TqI4Q72t9paL6GhC9GQaDIFnw":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"b1569e53-df2e-454f-aac7-0d99a40bc171","Notion says Fireworks breach exposed customer AI chat transcripts","notion-says-fireworks-breach-exposed-customer-ai-chat-transcripts-3c445f","Notion, the digital workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in a small number of workspaces. [...]","Notion disclosed that a breach at its AI provider, Fireworks AI, exposed Notion AI chat transcripts from a small number of workspaces. The incident occurred after an attacker accessed Fireworks AI's development environment via a third-party cloud provider, compromising various customer data including transcripts used for Notion's 'Insights' feature. Notion has since disabled the feature, deleted data from Fireworks' systems, and is advising affected users to rotate credentials.","Fireworks AI breach exposes Notion AI chat transcripts for a small number of workspaces.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnotion-says-fireworks-breach-exposed-customer-ai-chat-transcripts\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F11\u002F11\u002FNotion.jpg","2026-11-11T20:54:20+00:00","2026-11-11T21:00:15.346875+00:00",7,[17,20,23,25],{"name":18,"type":19},"Notion AI","product",{"name":21,"type":22},"Notion","vendor",{"name":24,"type":22},"Fireworks AI",{"name":26,"type":27},"AI","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":28,"icon":30,"name":31,"slug":32},null,"Breaches","breaches",[34,39,41,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[],[21,24,18],{"controls":54,"vendors":139},[55,84,110],{"slug":56,"name":57,"problem":58,"products":59},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":85,"name":86,"problem":87,"products":88},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":106,"product_name":107,"url":108,"description":109},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"slug":111,"name":112,"problem":113,"products":114},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":150},"third-party-ai-provider-breach-exposes-notion-customer-chat-transcripts-1794432025691","Third-Party AI Provider Breach Exposes Notion Customer Chat Transcripts","The Notion breach illustrates how sensitive customer data can be compromised through a vendor in the supply chain, without any failure on the primary vendor's own systems. An attacker gained access to Fireworks AI's development environment via a third-party cloud provider, exposing AI chat transcripts that Notion had entrusted to Fireworks for processing. This matters because organizations often lack visibility into their sub-processors' security posture, yet remain liable for the data shared with them. The incident underscores that every link in the AI service supply chain—including cloud infrastructure providers used by AI vendors—represents a potential attack surface for sensitive user data.",[145,146,147,148,149],"NIST CSF 2.0 GV.SC-07: Suppliers and third-party partners of suppliers are routinely assessed","ISO\u002FIEC 27001:2022 A.5.19: Information security in supplier relationships","ISO\u002FIEC 27001:2022 A.5.23: Information security for use of cloud services","NIS2 Article 21(2)(d)","NIST SP 800-53 SA-9: External System Services",{"NIS2 Article 21(2)(d)":151,"NIST SP 800-53 SA-9: External System Services":152,"ISO\u002FIEC 27001:2022 A.5.19: Information security in supplier relationships":153,"ISO\u002FIEC 27001:2022 A.5.23: Information security for use of cloud services":154,"NIST CSF 2.0 GV.SC-07: Suppliers and third-party partners of suppliers are routinely assessed":155},"NIS2's supply chain security point requires entities to address risks stemming from relationships with suppliers and service providers, directly covering the failure to secure the sub-processor cloud environment that led to this breach.","SA-9 requires organizations to define security requirements for external information system services and monitor vendor compliance, which would have governed how Fireworks AI and its own cloud sub-processors were expected to protect Notion customer data.","This control requires organizations to define and implement processes to manage information security risks associated with suppliers, which would have included evaluating Fireworks AI's use of a third-party cloud environment for handling sensitive chat transcripts.","This control specifically addresses managing security risks in cloud service usage, which applies directly to the chain of cloud providers involved—Fireworks AI relying on a third-party cloud where the breach originated.","Fireworks AI's sub-processor (a third-party cloud provider) was the entry point; routine security assessments of the full vendor chain would have identified and potentially remediated the exposure before an attack occurred."]