Breachesby GlyphDeepSeek
Disclosed Jan 29, 2025Unverified
Unauthenticated ClickHouse database exposed chat history and API secrets
Wiz Research found a publicly accessible, unauthenticated ClickHouse database belonging to DeepSeek containing over a million log lines, including user chat history, API secrets and backend details. DeepSeek secured it after being notified.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 29, 2025 |
| Discovered | Jan 2025 |
| Attack | Exposed data |
| Data exposed | Prompts and chatsMessagesAPI keysOtherInternal documents |
| Sector | AI · CN |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
["prompts","messages","api-keys","other"] to ["prompts","messages","api-keys","other","internal-docs"]by seedSource
empty to 2025-01by seedSource
Wiz researchers found an unauthenticated DeepSeek back-end database exposing more than a million log lines, including user chat histories, API keys and backend details; it was taken offline after DeepSeek was alerted. to Wiz Research found a publicly accessible, unauthenticated ClickHouse database belonging to DeepSeek containing over a million log lines, including user chat history, API secrets and backend details. DeepSeek secured it after being notified.by seedSource
DeepSeek left database with chat histories and API keys open online to Unauthenticated ClickHouse database exposed chat history and API secretsby seedSource
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.