TREE NEWS update: Taiyuan Chengming Technology Co. has sent a formal letter to Beijing Zhipu Huazhang Technology Co. over its ZCode client allegedly uploading company data and trade secrets without authorization, reserving the right to pursue legal action. Chengming said its own forensics found the uploads were automatically triggered and occurred in bulk, including complete source code, system architecture, version-control history, database passwords, cloud credentials and employee personal information — far beyond the scope stated in Zhipu’s privacy policy, despite Zhipu’s public apology and claim that the issue was fixed.
Taiyuan Chengming Accuses Zhipu’s ZCode of Uploading Full Source Code, Threatens Legal Action
The dispute shifts from a coding-tool glitch to a data-governance liability question, since the alleged uploads reportedly extended to credentials and personal information, not just code. That matters most for enterprises weighing AI coding assistants against their own security reviews, and for vendors whose privacy policies are the stated boundary of data handling. Whether forensics claims hold up, and how Zhipu's fix is independently verified, are the open questions.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.