> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts used for the Insights feature. Chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain any tool call results. Beyond the words in the chat transcripts themselves, the data contained no information that could specifically identify the workspace, user, or company.
> As a precaution, we recommend that you treat this unattributable data as if it were exposed. If anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.
Okay, so the actual impact is quite interesting: they did not notify you if they could not attribute the transcripts to you! You should really treat anything sensitive sent to Notion AI as compromised because they are not sure where these transcripts came from.
Yes, and they won't let admins see it either. It's insane.
> "unattributable Notion AI chat transcripts"
Who is using Notion for a chat about the weather? It's chats about your content and data.
sounds like someone just read the inference container logstream and didn't implement wide logs
In all fairness, treating API tokens as compromised the moment you pasted them into an AI chat seems a reasonable default in general.