Threat reportThreat IntelligenceTL-2026-3899
DHS Bans DeepSeek AI Models and Products from Federal Civilian Agencies (Foreign-Adversary AI Supply-Chain and Data-Exposure Risk)
DHS Bans DeepSeek AI Models and Products from Federal (TL-2026-3899), also tracked as DHS DeepSeek ban, is a medium-severity tracked intrusion set, first published 2026-10-19. It is linked to a China-nexus actor with low confidence, affects Hangzhou DeepSeek Artificial Intelligence DeepSeek AI models, apps and, maps to 6 MITRE ATT&CK / ATLAS techniques (AML.T0010, AML.T0051, AML.T0054), and is covered by 9 detection rules and 12 indicators of compromise.
- Severity
- MEDIUMAssessed severity
- CVEs
- 0None referenced
- Techniques
- 6MITRE ATT&CK / ATLAS
- Actors
- 0Not attributed
- Detection rules
- 9SPL · KQL · Sigma
- IOCs
- 12Indicators of compromise
Key facts for TL-2026-3899
- Threat ID
- TL-2026-3899
- Also known as
- DHS DeepSeek ban, DHS DeepSeek federal civilian agency order
- Severity
- MEDIUM
- Status
- ACTIVE
- Category
- THREAT_INTEL
- First published
- Last reviewed
- Attribution confidence
- LOW
- Nation-state nexus
- China
- Motivation
- ESPIONAGE
- Target sectors
- government administration, federal civilian agencies
- Target regions
- North America
- Detection rules
- 9
- Indicators of compromise
- 12
Malware and tooling in DHS Bans DeepSeek AI Models and Products from Federal
Malware and tooling: DeepSeek-R1
How DHS Bans DeepSeek AI Models and Products from Federal works
DHS issued an order banning DeepSeek AI models and products from Hangzhou DeepSeek Artificial Intelligence across federal civilian agencies, citing PRC-jurisdiction data storage, collection of PII and digital fingerprints, and possible transfer of data to the PRC. Agencies must exclude DeepSeek from future purchases and remove existing installations; exceptions require 60-day advance notice with compelling justification.
This is a policy action, not a vulnerability: no CVE, CVSS score, active exploitation, PoC or threat-actor attribution is cited in the source reporting. CyberScoop (published 2026-10-19) reports that DHS ordered federal civilian agencies to stop using AI models and products from Hangzhou DeepSeek Artificial Intelligence and its affiliates. The stated concerns are data storage on Chinese servers subject to PRC national-security and government-access laws, collection of personally identifiable information and digital fingerprints, a prompt-response mechanism through which sensitive data could be transferred, and malware/compromise risk to federal IT systems. DHS also warned that data transferred to the PRC could produce actionable intelligence on U.S. persons and government programs.
The order requires agencies to exclude DeepSeek from future procurements and remove existing installations; the removal timeline is not specified in the reporting. Exceptions need 60 days' advance notice and a compelling justification (mission-critical or national-security need). Agencies are encouraged to strengthen security controls, monitor traffic, enable enhanced logging and detect anomalous activity during the transition. CyberScoop names Moonshot AI (Kimi) and Alibaba (Qwen) only as other Chinese models of concern; they are not covered by the order.
Supporting context from primary and secondary sources: Wiz Research disclosed on 2025-01-29 an unauthenticated, publicly reachable ClickHouse database at oauth2callback.deepseek.com and dev.deepseek.com (ports 8123 and 9000). Its log_stream table held over one million entries including chat history, secret keys and backend details, dating from 2025-01-06; DeepSeek secured it after notification. NIST CAISI's 2025-09-30 evaluation found agents built on DeepSeek R1-0528 were on average 12 times more likely than U.S. frontier models to follow malicious instructions, and that the model answered 94% of overtly malicious requests under a common jailbreak versus 8% for U.S. reference models. Several agencies (NASA, Pentagon, Navy, Commerce, DOT, DOE, USDA) had already blocked DeepSeek on a discretionary basis in 2025.
Defensive relevance: this is an AI-usage governance and shadow-AI detection issue. SOC teams should inventory and block DeepSeek endpoints and applications, hunt for browser, mobile and local-model usage, and monitor for data egress to DeepSeek-operated services.
MITRE ATT&CK / ATLAS techniques used in TL-2026-3899
Initial Access
AML.T0010 AI Supply Chain Compromise; T1195 Supply Chain Compromise
Execution
AML.T0051 LLM Prompt Injection
Defense Evasion
Collection
Exfiltration
Affected products and versions in DHS Bans DeepSeek AI Models and Products from Federal
- Hangzhou DeepSeek Artificial Intelligence — DeepSeek AI models, apps and products (including affiliates)
Vulnerable versions: all versions
Remediation for DHS Bans DeepSeek AI Models and Products from Federal
Immediate actions
- Inventory and remove DeepSeek applications, browser extensions and locally hosted DeepSeek model deployments from agency systems
- Block DeepSeek domains (deepseek.com and subdomains) at DNS, proxy and CASB/SSE layers
- Exclude DeepSeek products from new procurements and contracts
- Enable enhanced logging and traffic monitoring for DeepSeek-related egress during the transition
Workarounds
- Agencies needing an exception must give 60-day advance notice with compelling justification, per the order as reported
Longer-term hardening
- Establish an AI acceptable-use policy with an approved-model allowlist
- Deploy shadow-AI discovery through CASB, DLP and endpoint telemetry
- Add AI supply-chain and foreign-adversary AI vendor risk review to procurement
- Apply data-classification controls to prompts submitted to external AI services
Timeline of DHS Bans DeepSeek AI Models and Products from Federal
- Earliest entries in the DeepSeek log_stream table later found exposed by Wiz Research
- USDA begins blocking DeepSeek via Microsoft Defender for Cloud Apps
- Wiz Research discovers and reports unauthenticated ClickHouse database exposure at DeepSeek; DeepSeek secures it promptly
- Transportation Department formally blocks DeepSeek; NASA, Pentagon, Navy and DOE also restrict use in January 2025
- Department of Commerce bans DeepSeek on government devices (reported as March 2025)
- NIST CAISI publishes evaluation finding DeepSeek models lag U.S. models and are more susceptible to agent hijacking and jailbreaking
- CyberScoop reports DHS order banning DeepSeek from federal civilian agencies, with procurement exclusion, removal of installations and 60-day exception notice
Sources cited for DHS Bans DeepSeek AI Models and Products from Federal
- DHS to ban DeepSeek from federal civilian agencies (CyberScoop)
- Wiz Research: Exposed DeepSeek database leaking sensitive information
- NIST CAISI Evaluation of DeepSeek AI Models Finds Shortcomings and Risks
- Federal workers rarely seek DeepSeek, but it's happened (FedScoop)
- More US government departments ban controversial AI model DeepSeek (TechRadar)
- Unprotected DeepSeek database leaked highly sensitive information (SecurityWeek)
- Experts flag security, privacy risks in DeepSeek AI app (KrebsOnSecurity)
- DeepSeek's models are easier to manipulate than U.S. counterparts, research finds (Axios)
Detection coverage for TL-2026-3899
As of 2026-10-19, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-3899 across Splunk SPL, Microsoft KQL and Sigma, covering 12 indicator(s) of compromise. The whole corpus is readable without an account; a free account unlocks full detection query text in Splunk SPL, Microsoft KQL and Sigma; paid tiers add raw indicator values, correlation and the MCP server. Threadlinqs MCP server · View plans.