[Investigating][Severity: Moderate][Intrusion]

ONE CAREER, TRUSTDOCK, Yayoi and others: intrusion at Notion AI supplier Fireworks AI exposes AI chat records

An intrusion at Fireworks AI, which processed Notion AI data, may have exposed Japanese companies' staff chats with the AI, holding names and contacts of clients and users.

Disclosed

2026-11-11

Organizations involved

Leaked or at risk

2.3K

2,300

Downtime

Unknown

What happened

According to Notion Labs, Fireworks AI, a US company that Notion used to classify Notion AI usage for its Insights feature among other tasks, reported unauthorized access to some data on the night of 2 November. Notion cut its connection to Fireworks and deleted the data there by the morning of 3 November. On 6 November Fireworks said customer data may also have been accessed, and a new dataset confirmed on 8 November contained Notion AI chats used for Insights. Notion announced this on 9 November, US time. Fewer than 1% of workspaces are affected, and most records carry no user or workspace identifiers. [1] [16]

The records were mostly created from about 5 to 24 October 2026 and contain what employees typed into Notion AI and the AI's replies. Yayoi says Notion told it that Fireworks had kept input and output data against the terms of their agreement. Notion pages, databases and attachments are not affected. Notion revoked the Notion API keys found in the records and reported other providers' keys to their issuers. The Insights feature and models served through Fireworks are suspended. [1] [11] [15]

Affected companies in Japan

From 11 to 13 November, Japanese companies notified by Notion disclosed the incident one after another. None of their own systems or services was accessed. All say it is not yet known whether a third party obtained the records, treat them as leaked and are contacting the people concerned. No misuse has been found. [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]

What users should do

In notified workspaces, change any password or API key pasted into Notion AI during this period. Beware of suspicious email or calls posing as the companies or Notion. [1] [7]

Timeline

Detected 2026-11-06
Disclosed 2026-11-11
5 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak]
Entry point: Supplier

Data exposed or at risk

[Name][E-mail address][Phone number]

Supply chain

[Breached]

Organizations listed on this site: 13

Organizations involved

[Through a supplier][Moderate]Tokyo, ChiyodaScientific research, professional and technical services
Faeger Inc.
Business contact names and other data that employees entered; count under investigation.
[Through a supplier][Moderate]Okinawa, GinowanInformation and communications6 leaked
Interactive, Inc.
Names, titles and parts of meeting records of up to 6 business contacts.
[Through a supplier][Moderate]Hyogo, Kobe, ChuoInformation and communications
LRM, Inc.
Business contact names and other data that employees entered; count under investigation.
[Through a supplier][Moderate]Tokyo, ChiyodaInformation and communications
Nikkei Research Inc.
Customer company names, contact names and meeting contents; count under investigation.
[Through a supplier][Moderate]Tokyo, ShibuyaInformation and communications2,300 leaked
ONE CAREER Inc.
The chat records held up to about 2,300 items of personal data, such as names and contact details of its service users.
[Through a supplier][Moderate]Tokyo, MeguroInformation and communications53 leaked
RECEPTIONIST, Inc.
Names, company names, phone numbers, email addresses and inquiry contents of 53 people outside the company, plus employee data.
[Through a supplier][Moderate]Tokyo, MinatoInformation and communications
SecureNavi Inc.
Customer company names and contact names, and the contents of inquiries and meetings; count under investigation.
[Through a supplier][Moderate]Tokyo, ShinjukuInformation and communications
THIRD Inc.
Company names, names, phone numbers, email addresses and office addresses of business contacts, and employee names and contacts; count under investigation.
[Through a supplier][Moderate]Tokyo, ShinjukuInformation and communications81 leaked
TimeTree, Inc.
Names, affiliations and other details of 13 survey and interview participants, 5 business contacts and 81 officers and employees.
[Through a supplier][Moderate]Tokyo, ChuoInformation and communications205 leaked
TRUSTDOCK Inc.
It checked all 14,409 entries and found 205 records of business contacts (names, email addresses, phone numbers) and 22 of job candidates (names).

						Note
Faeger Inc.	[Through a supplier]	[Moderate]	Tokyo, Chiyoda	Scientific research, professional and technical services	Unknown	Business contact names and other data that employees entered; count under investigation.
Interactive, Inc.	[Through a supplier]	[Moderate]	Okinawa, Ginowan	Information and communications	6	Names, titles and parts of meeting records of up to 6 business contacts.
LRM, Inc.	[Through a supplier]	[Moderate]	Hyogo, Kobe, Chuo	Information and communications	Unknown	Business contact names and other data that employees entered; count under investigation.
Nikkei Research Inc.	[Through a supplier]	[Moderate]	Tokyo, Chiyoda	Information and communications	Unknown	Customer company names, contact names and meeting contents; count under investigation.
ONE CAREER Inc.	[Through a supplier]	[Moderate]	Tokyo, Shibuya	Information and communications	2,300	The chat records held up to about 2,300 items of personal data, such as names and contact details of its service users.
RECEPTIONIST, Inc.	[Through a supplier]	[Moderate]	Tokyo, Meguro	Information and communications	53	Names, company names, phone numbers, email addresses and inquiry contents of 53 people outside the company, plus employee data.
SecureNavi Inc.	[Through a supplier]	[Moderate]	Tokyo, Minato	Information and communications	Unknown	Customer company names and contact names, and the contents of inquiries and meetings; count under investigation.
THIRD Inc.	[Through a supplier]	[Moderate]	Tokyo, Shinjuku	Information and communications	Unknown	Company names, names, phone numbers, email addresses and office addresses of business contacts, and employee names and contacts; count under investigation.
TimeTree, Inc.	[Through a supplier]	[Moderate]	Tokyo, Shinjuku	Information and communications	81	Names, affiliations and other details of 13 survey and interview participants, 5 business contacts and 81 officers and employees.
TRUSTDOCK Inc.	[Through a supplier]	[Moderate]	Tokyo, Chuo	Information and communications	205	It checked all 14,409 entries and found 205 records of business contacts (names, email addresses, phone numbers) and 22 of job candidates (names).

Open in organization search

Sources

[1][Official]Fireworks AIのインシデントについてNotion · 2026-11-13
[2][Official]当社が利用するクラウドサービスの委託先への不正アクセスに伴う、AI機能での入力情報の流出の可能性に関するお知らせ（第一報）LRM · 2026-11-11
[3][Official]当社が利用するクラウドサービスの委託先への不正アクセスに伴う、お客様に関する情報漏えいの可能性についてのお詫びとお知らせ（第一報）SecureNavi · 2026-11-11
[4][Official]外部委託先への不正アクセスによる、社内情報の一部の情報漏えいの可能性についてTRUSTDOCK · 2026-11-11
[5][Official]当社が利用するクラウドサービスの委託先への不正アクセスに伴う、AI機能での入力情報の流出のおそれに関するお知らせとお詫び（第一報）THIRD · 2026-11-11
[6][Official]Notion AIに入力した情報の流出の可能性に関するお知らせ（第一報）Faeger · 2026-11-11
[7][Official]外部サービス「Notion」のAI機能における情報流出の可能性に関するお知らせとお詫び（第一報）ONE CAREER · 2026-11-12
[8][Official]当社が利用するクラウドサービスの委託先への不正アクセスによる情報流出の可能性に関するお知らせRECEPTIONIST
[9][Official]【お詫びとお知らせ】当社が業務で利用する外部サービスにおける不正アクセスに伴う情報漏えいの可能性についてTimeTree · 2026-11-12
[10][Official]当社利用クラウドサービスの委託先における不正アクセスによる個人情報漏えいのおそれに関するお知らせとお詫びInteractive · 2026-11-12