2025 DeepSeek — 1M+ chat records, API keys exposed
Data compromised
Chat histories; API keys; auth tokens; system logs
Technical writeup
Wiz found unprotected ClickHouse DB (oauth2callback.deepseek.com:9000). Plaintext chat histories, API keys, auth tokens, backend details. No authentication. Arbitrary SQL possible. Secured after disclosure.
Root cause
Misconfigured database; no authentication