Research Firm Wiz Research began investigating DeepSeek soon after its generative AI took the tech world by storm.

DeepSeek has secured a “completely open” database that exposed user chat histories, API authentication keys, system logs, and other sensitive information, according to cloud security firm Wiz. The security researchers said they found the Chinese AI startup’s publicly accessible database in “minutes,” with no authentication required.

Beyond investor and CEO panic, DeepSeek presents a host of security concerns. Here's what the experts think you should know.

Chinese AI company DeepSeek has fixed an exposed back-end database that was spilling sensitive information, including user chat histories and API keys, to the open internet. The DeepSeek database was not protected with a password, allowing anyone on the internet to access more than a million unencrypted logs inside.