Sensitive DeepSeek data exposed to web: cyber firm Wiz report

New York-based cybersecurity firm Wiz said it found a massive amount of sensitive data from Chinese artificial intelligence startup DeepSeek exposed to the open internet.

In a blog post published Wednesday, Wiz said it found a publicly accessible ClickHouse database linked to DeepSeek, completely open and unauthenticated, exposing sensitive data.

This database contained a significant volume of chat history, backend data and sensitive information, including log streams, API Secrets, and operational details.


ClickHouse is an open-source, columnar database management system designed for fast analytical queries on large datasets. It was developed by Russian technology company Yandex and is widely used for real-time data processing, log storage, and big data analytics, which indicates such exposure as a very valuable and sensitive discovery.

After skyrocketing to overnight fame, the Chinese artificial intelligence (AI) startup DeepSeek is now under scrutiny. On Monday, it had overtaken US rival ChatGPT in downloads from Apple's App Store, triggering a global selloff in tech shares. Microsoft and its investee, OpenAI, have alleged that the startup may have relied on OpenAI’s proprietary technology to develop its famed AI models.