VV-021criticalData leakage2025-01-29
DeepSeek left a database open with chat history and secrets
Wiz found a publicly accessible DeepSeek database that allowed full control over database operations, exposing over a million lines of logs with chat history and other sensitive data.
What it is
Published by Wiz Research on 29 January 2025. The exposure included log streams with highly sensitive information.
How to check
- If you sent sensitive data to DeepSeek’s hosted service before February 2025, assume it may have been exposed.
How to fix
- Rotate any credentials you pasted into prompts. Self-host the open weights if you need data control.
Sources
More advisories for this tool