China Mobile receives all data from registered users on DeepSeek

Feroot Security recently announced that after registration on DeepSeek, all information is transferred to third parties. In particular, the information is accessed by the telecommunications company China Mobile. The activities of this company have been banned in the US since 2019 due to some security risks. In addition, information is transferred to the CMPassport.com portal, which manages the accounts.  

Tracking user activity

There is a strong possibility that users are digitally fingerprinted after signing up for DeepSeek, and this data could be used to track all their activity on the web.

Feroot Security said that there is direct evidence that servers under the control of the Chinese government are being used for this work. Such a connection to government organizations has not previously been noticed.

DeepSeek is based in Hangzhou and officially states that all collected information is stored on secure servers in China. According to the Terms of Use and Privacy Policy, the service collects device information, IP, OS, keystroke data, performance logs, and more.