Detecting Data Leaks Before Disaster

In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk, according to Wiz Research. They identified a publicly accessible ClickHouse database belonging to DeepSeek, which the researchers said allowed full control over database operations and the ability to access internal data, with more than a million lines of log streams involved, including chat history and secret keys.

Wiz immediately reported the issue to DeepSeek, which promptly secured the exposure. The incident underscores the ongoing danger of data leakage, illustrating how unprotected data stores can expose sensitive information. It also highlights the need for robust data protection measures and rapid disclosure protocols to limit potential harm.