Chinese AI company DeepSeek recently addressed a serious security lapse involving an exposed back-end database that leaked sensitive information, including user chat histories and API keys, to the open internet.

Research Firm Wiz Research began investigating DeepSeek soon after its generative AI took the tech world by storm.

DeepSeek has secured a “completely open” database that exposed user chat histories, API authentication keys, system logs, and other sensitive information, according to cloud security firm Wiz. The security researchers said they found the Chinese AI startup’s publicly accessible database in “minutes,” with no authentication required.

Chinese AI company DeepSeek has fixed an exposed back-end database that was spilling sensitive information, including user chat histories and API keys, to the open internet. The DeepSeek database was not protected with a password, allowing anyone on the internet to access more than a million unencrypted logs inside.

Chinese AI DeepSeek is incredibly popular right now, but you should be careful about handing it any of your private data. Researchers over at Wiz reported on Wednesday that they identified a publicly accessible database belonging to DeepSeek, which in turned allowed anyone to access DeepSeek's internal data.

Beyond investor and CEO panic, DeepSeek presents a host of security concerns. Here's what the experts think you should know.