US says Chinese firms extracted billions of tokens from frontier AI models
Chinese firms accused of stealing billions of AI model tokens via industrial-scale distillation attacks.
US intelligence agencies have identified six Chinese AI companies engaging in industrial-scale "distillation attacks" against American frontier AI models. These firms, including DeepSeek and Moonshot AI, allegedly extracted billions of data tokens by making millions of API requests, significantly reducing their own AI development costs and timelines. The US government suspects Chinese government awareness of these operations, which leverage sophisticated techniques to bypass security measures.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonSix Chinese AI companies allegedly conducted 'distillation attacks' by making millions of API requests to extract billions of tokens from US frontier AI models, effectively stealing the intellectual value embedded in those systems. The root failure lies in insufficient access controls and rate-limiting on API endpoints, combined with inadequate monitoring to detect anomalous usage patterns indicative of systematic data harvesting. This matters because AI model outputs encode enormous R&D investment, and bulk extraction dramatically lowers barriers for adversaries to replicate cutting-edge capabilities without equivalent cost or time. The incident illustrates that AI APIs must be treated as high-value data assets requiring the same protective controls applied to proprietary databases or source code.
What helps against this
How we list vendors
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.