Skip to content
U.S. Bans DeepSeek in Federal Agencies Due to Security Risks

U.S. Bans DeepSeek in Federal Agencies Due to Security Risks

First seen 22 Oct 2026, 11:14 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 12:14 UTC
  • •The U.S. has banned DeepSeek products in federal civilian agencies due to critical vulnerabilities.
  • •Agencies have 60 days to purge DeepSeek technology from their systems.
  • •The ban is based on risks of data exposure and unauthorized access linked to Chinese servers.

The U.S. Department of Homeland Security has issued a ban on all DeepSeek products in federal civilian agencies, citing vulnerabilities and data threats linked to servers located in China. Agencies have 60 days to remove DeepSeek technology, with exceptions possible for mission- functions. The ban follows findings of multiple vulnerabilities in DeepSeek's iOS applications and a significant data leak in January 2025, which exposed sensitive information. The order does not apply to private consumers, state or local governments, or the Department of Defense. The ban is based on risks including potential unauthorized access to sensitive data and the collection of personally identifiable information (PII) by DeepSeek's account generation process.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-01-01
DeepSeek data leak reported
DeepSeek leaked over a million log entries, including sensitive information, through an unprotected database.
Ciberseguridadlatam
2025-02-01
Critical vulnerabilities discovered
Research published revealed multiple critical vulnerabilities in DeepSeek's iOS applications.
Ciberseguridadlatam
2026-10-21
DeepSeek ban announced
The U.S. Department of Homeland Security announced a ban on DeepSeek products in federal agencies due to security risks.
Ciberseguridadlatam

More articles in this cluster (2)

Following this threat?

Track Microsoft Azure in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What specific vulnerabilities led to the ban?
The ban is based on critical vulnerabilities in DeepSeek's iOS applications and risks associated with data exposure.
How long do agencies have to comply?
Agencies have 60 days to remove DeepSeek technology from their systems.
Are private companies affected by this ban?
No, the ban only applies to federal civilian agencies; private consumers and state/local governments are not affected.