Odaily Planet Daily reports: Taiyuan Chengming Technology has sent a 12-page legal notice to Zhipu regarding the ZCode "upload code" incident, stating that ZCode automatically packaged and uploaded entire workspaces containing source code, system architecture, Git history, database passwords, API keys, cloud service credentials, and personal information. One such workspace involved 32,932 files and approximately 411 million plaintext characters.
Chengming Technology requests Zhipu to clarify the storage location of the relevant data, whether any cross-border transmission has occurred, whether the data has been provided to third parties, and whether it has been used for model training. Additionally, Chengming Technology requires the complete deletion of the relevant data from servers, caches, backups, and disaster recovery systems, and demands proof of access, export logs, and deletion.
Zhipu previously apologized for this issue, stating that the problem stemmed from an early default-enabled "codebase indexing" feature, which has now been fixed. They also confirmed that related data will be destroyed after use and pledged to open-source ZCode and subject it to third-party review.