Report: DeepSeek’s chat histories and internal data were publicly exposed

Researchers say DeepSeek left sensitive information exposed, including users' chat histories

A cloud security firm has discovered a major data exposure involving Chinese AI company DeepSeek, raising security concerns amid the company's rapid rise.

Researchers found that part of DeepSake's database was exposed on the Internet

Report: DeepSeek’s chat histories and internal data were publicly exposed

A cloud security firm found a publicly accessible, fully controllable database belonging to DeepSeek, the Chinese firm that has recently shaken up the AI world, "within minutes" of examining DeepSeek's security, according to a blog post by Wiz. An analytical ClickHouse database tied to DeepSeek, "completely open and unauthenticated," contained more than 1 million instances of "chat history, backend data, and sensitive information, including log …

The first major DeepSeek hack might have already happened

DeepSeek halted new account registrations a few days ago, just as the AI app surged in the App Store. The company blamed the limitation on a malicious attack, saying that DeepSeek AI account holders could access the service while newcomers would have to wait. I wondered at the time whether the malicious attack was real or whether it was a ploy to hide the fact that DeepSeek infrastructure might not be able to handle the influx of new users dying…

Wiz researchers find sensitive DeepSeek data exposed to internet

A security issue at Chinese artificial intelligence firm DeepSeek exposed over a million lines of sensitive internal data, including user chat histories, API secrets, and backend operational details, according to research published Wednesday by cloud security firm Wiz.  The exposure, discovered earlier this month, stemmed from a publicly accessible ClickHouse database linked to DeepSeek’s systems. The database — hosted on two DeepSeek subdomains…

Security researchers found a big hole in DeepSeek's security

The cloud security firm Wiz Research found that DeepSeek left one of its databases exposed online. They were able to access user data, API keys and more.