Security update (July ‘26)

Summary

Notion investigated public claims that a large dataset of its data was offered for sale on X and Breached Forums. The investigation began after the claim surfaced on June 23, 2026, and included review of publicly shared materials, sample data, and support from a third-party partner. The sample did not match data in Notion systems and contained internal duplicates and inconsistent fields; the claimed asking price and the forum user’s history also raised concerns. A deeper investigation found further inconsistencies indicating that the alleged dataset could not have come from Notion’s systems, and forum administrators later flagged the user as fraudulent. Based on the reviewed information, Notion found no evidence of a breach, customer-data access, or compromise, concluding that the alleged materials were fabricated.

Takeaways

1. 1

   The sample data did not match Notion systems and contained internal duplicates and inconsistent fields.

2. 2

   The investigation found additional evidence that the alleged dataset and supporting materials could not have originated from Notion systems.

3. 3

   Notion found no evidence that its internal systems were breached or that customer data was accessed or compromised.