---
title: Notion Security Incident Checklist | Trust Keith
description: Notion disclosed a security incident involving third-party vendor Fireworks AI. Use this checklist to check if you’re affected and know what to do next.
---

[Trust Keith resources](https://resources.trustkeith.co)

# [Notion Security Incident Checklist | Trust Keith](https://resources.trustkeith.co/notion-ai-data-incident-what-to-do-next)

 Written by [Kayleigh Logan-Cleghorn](https://resources.trustkeith.co/author/kayleigh-logan-cleghorn) | Nov 11, 2026, 11:33:01 AM

Notion has confirmed a security incident at Fireworks AI, one of its third-party AI suppliers, that exposed some Notion AI chat transcripts. Notion says fewer than 1% of workspaces are affected.

Here's how to check whether you're one of them, and what to do if you are.

 

## **What to check first**

 

Does anyone in your business use Notion, including a personal or free account used for work? Ask around, not just the people with company logins. Notion notifies the account holder, not your business, so you may never hear about it directly.

 

Has your Notion workspace owner received a direct notice from Notion about this incident? Check spam folders too.

 

If notified, use Notion's "Security incident review" tool (the ? help menu in the sidebar, desktop app or browser, not mobile) to see exactly what was exposed for your workspace.

 

## **If you've been notified**

The clock starts now!

Record the date and time you became aware. If personal data is involved, you have 72 hours from that point to report to the ICO, unless the breach is unlikely to pose a risk to people. You can report what you know now and follow up later.

 

Rotate any passwords, API keys or other credentials that were pasted into Notion AI, whether or not your workspace shows up as affected. Then check logs for any misuse.

 

Work out what was actually exposed: most transcripts aren't tied to a specific person, but check for anything with customer names, emails or other personal data pasted in. "Unattributable" means Notion can't link a chat to a user, not that it contains no personal data. Look for names, contact details, HR, health or customer information pasted in.

 

Log the incident in your data breach register, even if you decide it doesn't need reporting. "We assessed it and decided not to report" still needs writing down.

 

If you handle personal data on behalf of your own clients (as a processor), check your contracts: you will usually need to tell them promptly, whatever the risk level.

 

If you are the controller (you decide why and how the data is used) and the people whose data was exposed face a high risk, you need to tell them directly. If you are the processor, that call sits with your client.

 

## **Watch out for**

Emails claiming to be from Notion asking you to click a link or reset your password over this incident. Genuine reviews happen inside Notion itself, so go there directly rather than clicking links. There's no need to change your Notion password because of this.

 

## **If you need to notify your own customers**

Here's a suggested starting point:

> We wanted to let you know that Notion, a tool we use for \[purpose\], has disclosed a security incident at Fireworks AI, one of its suppliers. \[Some information about you / No information about you\] was included in the affected data. \[What was involved.\] \[What this could mean for you, e.g. a higher risk of targeted phishing.\] We have \[steps taken\]. We recommend you \[actions\]. If you have any questions, reply to this email or contact \[name\].

 

 

## Tired of firefighting every time an incident comes up?

At Trust Keith, we take information security and privacy off your plate - for good. No more tackling fires as and when they crop up. You’ll have a dedicated expert embedded in your team, backed by an intelligent platform, meaning you have all the right measures, processes and support in place whenever you need them.

<https://www.trustkeith.co/>

 

<https://resources.trustkeith.co/office-hours>

 

[View full post](https://resources.trustkeith.co/notion-ai-data-incident-what-to-do-next)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Kayleigh Logan-Cleghorn"
  },
  "dateModified" : "2026-11-11T11:33:01.816Z",
  "datePublished" : "2026-11-11T11:33:01Z",
  "headline" : "Notion AI Data Incident: A Checklist For What To Do Next",
  "image" : {
    "@type" : "ImageObject",
    "height" : 800,
    "url" : "https://24879685.fs1.hubspotusercontent-eu1.net/hubfs/24879685/Resources%20Card%20template%2c%20Guides%20%2863%29.png",
    "width" : 1400
  },
  "mainEntityOfPage" : "https://resources.trustkeith.co/notion-ai-data-incident-what-to-do-next",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Step up your data protection game"
  }
}
```