Public Notion Pages Leaks Profile Photos and Email address of Editors

Cybersecuritynews •Abinaya • April 20, 2026

Notion, a widely used productivity and collaboration platform, is facing intense scrutiny from the cybersecurity community. Security researchers have revealed that public Notion pages silently expose the personally identifiable information (PII) of anyone who has ever edited them. This data leak includes full names, email addresses, and profile photos, raising significant privacy concerns for organizations […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Data Leak Exposes Editors' PII on Public Notion Pages Notion, a popular productivity platform, has been identified as having a significant data exposure issue. Public Notion pages are leaking personally identifiable information (PII) of editors, including full names, email addresses, and profile photos. This exposure occurs without any authentication requirements, making it easy for malicious actors to scrape data from thousands of publicly accessible company wikis and personal pages. Organizations using Notion for public documentation are particularly at risk, as this vulnerability could lead to targeted phishing attacks and other privacy violations. The issue has raised alarms within the cybersecurity community, prompting calls for immediate action to secure sensitive information. As of now, there are no reported patches or fixes for this vulnerability. The scope of the impact remains unclear, but it is expected to affect a large number of users and organizations relying on Notion. 2 sources 63

Extracted Entities

Public Notion Pages Leaks Profile Photos and Email address of Editors

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Tools (1)