DeepSeek, the Chinese artificial intelligence that went viral, suffered a data leak. Security flaw raises alerts about risks in AI!
In recent days, the artificial intelligence (AI) platform DeepSeek has become a phenomenon in the technology sector, gaining a prominent place in the market and surpassing established competitors. However, a recent security breach and data leak has put the Chinese company at the center of a controversy by exposing sensitive data from users and the platform itself.
Critical failure and leak of confidential data
The vulnerability was detected by the Israeli cybersecurity company Wiz, which identified easy access to a database in the ClickHouse management system, used by DeepSeek.
The discovery revealed the exposure of several critical pieces of information, including chat history of users with the chatbot, secret keys of the platform API, metadata of interactions and details of backend operation.
- Revolution in education: free artificial intelligence courses that are transforming careers in Brazil
- Technological advances in healthcare: The role of artificial intelligence, RNA therapies and robotics in the evolution of diagnostics and treatments in 2025
- Startup Harumi Transforms Processes into Power for Large Companies with AI and Mathematics
- Why does Gen Z trust AI more than humans at work? Discover the reasons behind this preference!
Most alarmingly, this data was stored in plain text, without any type of encryption, making it easy for malicious attackers to access.
According to Wiz, the vulnerability was quickly fixed after the company contacted DeepSeek. However, the Chinese startup has not yet officially commented on the incident.
Impact and risks for DeepSeek users
The DeepSeek data leak raises important questions about the security of AI platforms, especially those that leverage APIs widely adopted by businesses and developers.
According to experts, a breach of this level could allow unauthorized access to sensitive information, increasing the risk of data theft, industrial espionage and more sophisticated cyber attacks.
Earlier this week, DeepSeek reported that it had suffered “malicious attacks against servers“, without specifying whether there was an invasion or just an attempt to overload the system.
The lack of clarification from the Chinese company is causing concern among users, who are now wondering about the security of their information on the platform.
Wiz's warning to businesses and users about the use of AI
A Wiz concluded its report by warning companies and users about the risks associated with the accelerated adoption of technologies based on artificial intelligence.
According to experts, it is essential that companies that use DeepSeek's API or other AIs review their security protocols and avoid feeding these platforms with confidential data without a careful assessment of the risks involved.
The case reinforces the need for stricter protection measures to guarantee users' privacy and prevent future leaks.
DeepSeek, which has recently gained prominence on the global stage, will need to demonstrate a commitment to digital security to maintain the trust of the public and its business partners.