Breaches and incidentsBriefChecked against a primary source

Joint advisory AA26-251A: Chinese AI firms’ industrial-scale model distillation

CISA, NSA and FBI say China-based AI companies, likely with Chinese government awareness, extracted capabilities from US models (variants of Claude, GPT...

Disclosed

What happened

  • CISA, NSA and FBI say China-based AI companies, likely with Chinese government awareness, extracted capabilities from US models (variants of Claude, GPT, Gemini, Grok) via billions of tokens across millions of requests since at least late 2024. Named: DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, Z.AI.
  • Technique: distillation through API and subscription access, violating terms of service.
  • Attribution: the three US agencies.
  • Response: guidance for AI providers.

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.