Notion AI chats exposed access keys after supplier breach

Access keys that Notion users pasted into AI chats were exposed after a breach at a supplier, according to a CryptoSlate report on a November 11 action. We don't have many details. The takeaway doesn't need them.

What we know

Here's the mechanism: a chat with no ownership label can still leak the credentials inside its messages. Nobody has to work out whose chat it was. If the key is in the text, whoever holds the text holds the key.

The exposure came through a supplier. Users weren't doing anything exotic. That's the uncomfortable bit. You can lock down your own account and still lose a secret that sits in someone else's system.

The source summary doesn't say how many keys leaked, which services they opened up, or who carried out the breach. I won't guess at any of it.

Why it matters

Crypto users paste things into AI chats all the time. Exchange API keys, RPC endpoints, bot configs, scripts with secrets baked in. It feels private. Once a third party touches the data, it isn't.

A leaked exchange API key with trading or withdrawal permissions puts real money at risk. Even a read-only key shows your balances and activity.

The fixes are dull but they work:

• Rotate any key you've ever pasted into an AI tool or shared workspace.
• Use keys with minimal permissions and withdrawal whitelists.
• Keep seed phrases and private keys out of chats entirely. Always.

The open question is how many teams actually know what's sitting in their old AI chat history. My guess is most don't.