Security update (July ’26)

Notion is aware of public claims alleging that a large dataset of Notion data was offered for sale on X and Breached Forums. We take any claim involving customer data seriously, and our security team conducted a thorough investigation with support from a third-party partner.

We understand that public-breach claims can create concern, especially when they appear on social media or underground forums. Our team investigated this allegation promptly, worked with external support to validate the claims, and found the materials and actor behavior to be fabricated. No customers were impacted.

When the claim first surfaced on morning of June 23, 2026, our team reviewed the materials that had been shared publicly, including the sample data posted on the forum. We identified several indicators consistent with fraudulent breach claims seen against other companies. The post claimed a large dataset was available, but the asking price was unusually low for the volume of data being claimed. The forum user also appeared to have a pattern of making large breach claims against other companies that those companies denied.

Our initial review of the publicly shared sample data found multiple inconsistencies. The sample did not match data in Notion systems, and it contained internal duplicates and inconsistent fields that were not consistent with a legitimate Notion dataset.

We treated the matter as credible while we continued a deeper investigation. That investigation found additional evidence that the claim was fabricated, including further inconsistencies in the materials presented in support of the alleged dataset that indicated that the data could not have come from our systems. No data in the alleged dataset or materials reviewed by our team were found to match data in Notion systems.

Forum administrators have since flagged the user as fraudulent, taking down the post on one forum and banning the user on the other, further discrediting this claim.

At this time, based on the information we reviewed and the investigation our team and external parties performed, we have not identified any evidence of a breach of Notion’s internal systems. The dataset we analyzed was incomplete and inconsistent with Notion system data. All evidence suggests the alleged materials were completely fabricated. We found no evidence that customer data was accessed or compromised.