Hard-coded API keys and passwords linked to DeepSeek exposed
A DeepSeek-related data leak exposed 12,000 hard-coded, working API keys and passwords. The timing of the exposure, whether they were exploited and response measures have not been confirmed.
Key facts
- Affected organisation
- DeepSeek
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Exposure of 12,000 working API keys and passwords
- Cause / method
- Hard-coded API keys and passwords
- Location
- China
If your data was exposed
Exposed dataPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
Timeline
- The exposure of 12,000 hard-coded API keys and passwords linked to DeepSeek was reported.
1 related reports
Other incidents at DeepSeek
China investigates DeepSeek and Moonshot over alleged data leakage to Claude
Allegations emerged that data from DeepSeek and Moonshot leaked to Anthropic's Claude. China launched an investigation into the two companies, and whether a leak occurred and its scale have not been confirmed.
Read on Yahoo ↗DeepSeek breach puts dark web links in spotlight
A security breach occurred at DeepSeek. Dark web issues linked to the incident came to the fore, but the specific scale of the damage and the response have not been confirmed.
Read on Dark Reading ↗DeepSeek database exposure leaks chat logs and other sensitive data
Impact: Leak of sensitive data including chat logs, and of users' personal information
Security firm Wiz discovered sensitive data, including chat logs, leaking from an exposed DeepSeek database. The South Korean government also moved to look into the personal data leak, and the Personal Information Protection Commission (PIPC) sent DeepSeek a formal inquiry. A leak of users' personal information was later confirmed.
Related reports: 10 · last report →DeepSeek limits new sign-ups after large-scale cyber-attack
Impact: New registrations restricted and service disrupted
DeepSeek restricted new registrations after being hit by a large-scale cyber-attack. The service disruption occurred as users flocked to the platform and its AI chatbot climbed to the top of app store rankings.
Related reports: 12 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.