DeepSeek has secured a “completely open” database that exposed user chat histories, API authentication keys, system logs, and other sensitive information, according to cloud security firm Wiz. The security researchers said they found the Chinese AI startup’s publicly accessible database in “minutes,” with no authentication required.

Research Firm Wiz Research began investigating DeepSeek soon after its generative AI took the tech world by storm.

Chinese AI company DeepSeek has fixed an exposed back-end database that was spilling sensitive information, including user chat histories and API keys, to the open internet. The DeepSeek database was not protected with a password, allowing anyone on the internet to access more than a million unencrypted logs inside.

Anyone could access this DeepSeek database containing chat logs and sensitive information, and researchers found it after just a few minutes.The Latest Tech News, Delivered to Your Inbox

Chinese AI DeepSeek is incredibly popular right now, but you should be careful about handing it any of your private data. Researchers over at Wiz reported on Wednesday that they identified a publicly accessible database belonging to DeepSeek, which in turned allowed anyone to access DeepSeek's internal data.

A cloud security firm found a publicly accessible, fully controllable database belonging to DeepSeek, the Chinese firm that has recently shaken up the AI world, "within minutes" of examining DeepSeek's security,

China-based DeepSeek has exploded in popularity, drawing greater scrutiny. Case in point: Security researchers found more than 1 million records, including user data and API keys, in an open database.

DeepSeek, the popular AI startup, left one of its online databases exposed. If bad actors accessed this database, they had access to sensitive user information, such as chat history and secret keys.