Cyber Security News

DeepSeek Accused of Over-Collecting Personal Data, Says South Korea’s Spy Agency

South Korea’s National Intelligence Service (NIS) has raised alarms over the Chinese artificial intelligence app, DeepSeek, accusing it of “excessively” collecting personal data from users and utilizing all input data to train its AI models.

The NIS also scrutinized the app’s controversial responses to sensitive national and cultural questions, which have fueled greater concerns.

In a statement released, the NIS revealed that it had officially advised South Korean government agencies to safeguard against potential risks posed by DeepSeek.

Key among their concerns is the app’s alleged ability to track keyboard input patterns that could potentially identify individuals.

These data, the NIS claimed, are transferred to servers operated by Chinese companies, including volceapplog.com.

“Unlike other generative AI services, it has been confirmed that chat records are transferable,” the NIS stated.

The agency warned that such data could be accessed by the Chinese government, as Chinese law mandates companies to comply with data-sharing requests from authorities.

In response to these mounting concerns, several South Korean government ministries have blocked access to DeepSeek, aligning with similar actions taken by Australia and Taiwan to restrict or monitor the app.

According to the NIS, apart from extensive data storage practices, DeepSeek also allegedly provides advertisers unrestricted access to user information.

Controversial Responses Spark Outrage

Adding to the controversy, the NIS pointed to discrepancies in DeepSeek’s answers to culturally and politically sensitive questions when asked in different languages.

For instance, when asked about the origin of kimchi – a traditional South Korean fermented dish – the app stated in Korean that it is a Korean dish.

However, when asked the same question in Chinese, the app responded that the dish originated in China. Reuters independently corroborated this inconsistency, further stoking tension.

The origins of kimchi have been a contentious subject between South Korea and China, with debates flaring on social media in recent years.

Additionally, the NIS highlighted that the app avoids addressing politically sensitive issues, such as the 1989 Tiananmen Square crackdown, by prompting users to change the topic with a suggestion like: “Let’s talk about something else.”

DeepSeek has yet to respond to requests for clarification. Meanwhile, during a February 6 briefing, a spokesperson for China’s Ministry of Foreign Affairs assured that Beijing prioritizes data privacy and security and claimed that the government does not compel companies to violate privacy laws.

As tensions grow, South Korea joins other nations in scrutinizing AI applications like DeepSeek, raising broader concerns over the intersection of technology, data security, and national sovereignty.

Are you from SOC/DFIR Team? - Join 500,000+ Researchers to Analyze Cyber Threats with ANY.RUN Sandbox - Try for Free

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago