A massive data leak from AI startup DeepSeek has raised alarms about the security of sensitive user data in the rapidly evolving AI industry.
DeepSeek AI
Cybersecurity researchers at Wiz recently found a major security lapse at DeepSeek, a Chinese AI startup. The company, known for its DeepSeek-R1 AI model, had left a ClickHouse database exposed — an oversight with serious consequences.
Over a million log entries, containing chat history, secret keys, and backend details, were left unprotected in the exposed database. Worse, the database allowed full administrative control without authentication, making it a goldmine for potential attackers.