Chengming Technology Holds Zhipu Technology Accountable for Unauthorized Data Uploads

Taiyuan Chengming Technology Co., Ltd. has issued a letter to Beijing Zhipu Huazhang Technology Co., Ltd., demanding a response regarding the unauthorized upload of company data assets and trade secrets by the ZCode client, while reserving the right to pursue legal action. Chengming Technology pointed out that Zhipu has publicly apologized for the "silent upload of user local repository data" and claimed that the issue has been fixed. However, independent evidence shows that the upload behavior was automatically triggered and occurred in bulk, involving complete source code, system architecture, version control history, database passwords, cloud service credentials, and personal information of employees, which exceeds the scope of data collection stated in its Privacy Policy. Despite the client being updated to version 3.12.3 on September 16, upload behavior was still detected in the early hours of the day Zhipu publicly apologized, leading Chengming Technology to question the effectiveness of the "fix." The network requests from the ZCode client point to a Singapore entity, while the service agreement is signed with Beijing Zhipu Huazhang. Chengming Technology demands clarification on the responsible party for the uploads and whether the data was transmitted abroad or stored overseas. Chengming Technology requires Zhipu to respond in writing by October 10, cease processing and completely delete the uploaded data and related derivative data, provide a complete list of processing situations, clarify the data's whereabouts, whether it has been shared with third parties, whether it has been used for model training, and whether cross-border transmission has occurred, explain the management of encryption private keys and provide complete operation logs, issue a proof of deletion completion, and commit to not uploading data without authorization again. Zhipu has not yet publicly responded to this letter.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.