logoalt Hacker News

Shank • today at 11:02 AM • 4 replies • view on HN

> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts used for the Insights feature. Chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain any tool call results. Beyond the words in the chat transcripts themselves, the data contained no information that could specifically identify the workspace, user, or company.

> As a precaution, we recommend that you treat this unattributable data as if it were exposed. If anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.

Okay, so the actual impact is quite interesting: they did not notify you if they could not attribute the transcripts to you! You should really treat anything sensitive sent to Notion AI as compromised because they are not sure where these transcripts came from.


Replies

lowdude • today at 11:08 AM

In all fairness, treating API tokens as compromised the moment you pasted them into an AI chat seems a reasonable default in general.

➕ show 1 reply
chinathrow • today at 11:08 AM

Yes, and they won't let admins see it either. It's insane.

xtiansimon • today at 12:30 PM

> "unattributable Notion AI chat transcripts"

Who is using Notion for a chat about the weather? It's chats about your content and data.

htrp • today at 3:27 PM

sounds like someone just read the inference container logstream and didn't implement wide logs