
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Multiple Chinese AI platforms, including Doubao, DeepSeek, and Kimi, have seen their paid memberships and API keys illicitly sold or rented on secondary markets. This misuse exposes users to privacy breaches, data theft, financial losses, and legal violations, as unauthorized access allows third parties to view and potentially sell user data.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves AI systems (large AI models) being accessed and used through unauthorized means (cracked accounts, shared accounts, API keys) sold on second-hand platforms. This misuse directly leads to harms including personal information leakage, financial loss, and violation of intellectual property and personal data protection laws. The article documents actual occurrences of these harms and expert warnings about the risks, confirming realized harm rather than just potential risk. Hence, it meets the criteria for an AI Incident, as the AI system's misuse has directly led to violations of rights and harm to users.[AI generated]