DeepSeek 2026 Data Leak: What Happened and What User Data Was Exposed

DeepSeek became the AI app everyone was talking about. Then, in early 2025, security researchers found a database sitting wide open on the public internet with over a million rows of user data inside. If you used DeepSeek during its initial explosion in popularity, some of your chat history might have been part of that exposure.

Here's what happened, what data was involved, and what it means if you're still using the app today.

DeepSeek - AI Assistant

DeepSeek

DeepSeek is an AI assistant app that offers free access to its latest reasoning model.

Productivity AI Chatbot

Download (26.6 MB)

The DeepSeek Database Exposure

In late January 2025, cloud security firm Wiz published a report about a database they'd found. It belonged to DeepSeek, and it was completely open to anyone who knew where to look.

The database was a ClickHouse instance — a fast analytics database used for processing large amounts of data. Wiz researchers said it contained more than a million rows of log data. Inside those logs: user chat histories, API keys, backend operational details, and internal system information that should never have been publicly accessible.

Wiz notified DeepSeek, and the company secured the database quickly after being alerted. But the fact that it was exposed at all — and that Wiz, not DeepSeek's own team, found it — raised serious questions about how the company was handling security during a period when its user base was exploding.

What User Data Was Exposed

The exposed database didn't just contain anonymous usage statistics. According to Wiz's findings, the data included:

Chat logs: Actual conversations users had with the AI assistant.
API keys: Credentials that developers use to access DeepSeek's paid API services.
Internal system information: Backend logs and configuration data that could give attackers a map of DeepSeek's infrastructure.

For regular users of the free chat app, the main concern is chat history. If you'd pasted sensitive information into conversations with DeepSeek — work documents, personal details, private messages you were asking it to summarize — that data was potentially exposed.

For developers with API keys in the database, the risk was more concrete: anyone who accessed the database could have used those keys to make API calls on the developer's account, running up charges or accessing associated data.

The DDoS Attacks That Followed

The database exposure wasn't DeepSeek's only security problem. During the same period in late January 2025, the company faced a series of large-scale DDoS attacks.

These attacks peaked at 3.2 Tbps — enough traffic to knock most services offline. The first wave took DeepSeek's registration system down for several hours. Over the following days, the attack methods escalated from basic HTTP probes to more sophisticated application-layer attacks using Mirai botnet variants.

The timing wasn't a coincidence. DeepSeek had just released its R1 reasoning model and was dominating app store charts worldwide. The attacks appeared to be aimed at disrupting the service during its peak growth period — and they succeeded, at least temporarily, in preventing new users from signing up.

Reviews

DeepSeek Online: How to Use in Browser

Want to use DeepSeek online? Here's how to access the free AI assistant in your browser at deepseek.chat, with tips for getting the most out of the web version.

Learn More

The Context Isolation Bug in May 2026

A separate incident surfaced more recently. In May 2026, users on Chinese social media reported that entering specific special characters into DeepSeek's input field could cause the system to display fragments of other users' conversations.

The bug appeared to be a context isolation failure — different user sessions weren't being properly separated, so one person's prompt fragments could leak into another's view. Users reported seeing snippets of conversations about high school math problems, business plans, and in at least one case, personal relationship advice.

DeepSeek hasn't published a detailed postmortem of this incident, but the service appeared to be patched within hours of the reports surfacing. The root cause, according to community analysis, was likely related to how DeepSeek handled the tags used by its reasoning models to mark internal thought processes.

What This Means if You Use DeepSeek

None of these incidents suggest DeepSeek is uniquely dangerous among AI chatbot apps. Every major AI platform has had security incidents — OpenAI, Anthropic, and Google have all disclosed data handling issues at various points. What's notable about the DeepSeek case is the pattern: multiple incidents in a short time window, during a period of explosive user growth.

If you're using the free DeepSeek app, the practical takeaway is straightforward: don't paste sensitive information into any AI chatbot, regardless of which company runs it. These services process your input on cloud servers, and no company's security is perfect.

DeepSeek's privacy policy states that data is stored on servers in China and that user inputs may be used for service improvement. The company provides account deletion options if you want to remove your data.

How DeepSeek Has Responded

After the Wiz report, DeepSeek quickly secured the exposed database. The company has since added security measures, though specific details haven't been publicly documented in the same level of detail that Western AI companies typically provide.

The DDoS resilience has also improved — DeepSeek's infrastructure has held up through several major service launches since, including the V4 model release in April 2026, which brought in 1.7 million new registrations in a single day without a repeat of the January-level outages.

For developers using the API, DeepSeek now offers key rotation tools and usage monitoring through its platform dashboard — standard security features that weren't fully in place during the early 2025 surge.

If you want to try DeepSeek for yourself, you can download it on APKPure. The latest version is available there the same day it drops on official channels, and you'll have a clean APK rather than needing to sideload from less reliable sources.

DeepSeek - AI Assistant

DeepSeek

DeepSeek is an AI assistant app that offers free access to its latest reasoning model.

Productivity AI Chatbot

Download (26.6 MB)