Taiyuan Chengming Technology Sends Legal Letter to Zhipu Over ZCode "Code Upload" Incident, Demands Complete Deletion of Relevant Data

Odaily reports: Taiyuan Chengming Technology has sent a 12-page legal letter to Zhipu regarding the ZCode "code upload" incident, alleging that ZCode automatically packaged and uploaded entire workspaces, involving source code, system architecture, Git history, database passwords, API keys, cloud service credentials, and personal information. One workspace involved 32,932 files and approximately 411 million plaintext characters.

Chengming Technology demands that Zhipu disclose the storage locations of the relevant data, whether any cross-border transmission occurred, whether the data was provided to third parties, and whether it was used for model training. It also demands the complete deletion of relevant data from servers, caches, backups, and disaster recovery systems, along with the provision of access logs, export logs, and deletion certificates.

Zhipu previously issued an apology over the matter, stating that the issue stemmed from an early "codebase indexing" feature that was enabled by default, which has since been fixed. The company stated that the relevant data will be destroyed after use, and pledged to open-source ZCode and accept third-party review.