Xiaomi is reportedly under investigation by the Cyberspace Administration of China regarding its Mimo AI models, which are alleged to have leaked user data to Anthropic.

{
  "signal_id": "739689c7-85e6-5936-a6ad-2e55d8e0b284",
  "signal_type": "reddit-company",
  "signal_subtype": "legalAction",
  "detected_at": "2026-09-23T11:02:47+00:00",
  "company": {
    "name": "Xiaomi",
    "domain": "mi.com"
  },
  "data": {
    "nsfw": false,
    "stage": "reported",
    "awards": 0,
    "timing": "in_progress",
    "topics": [
      "data privacy",
      "security",
      "investigation",
      "ai",
      "compliance"
    ],
    "post_id": "1wo2u9l",
    "summary": "Xiaomi is reportedly under investigation by the Cyberspace Administration of China regarding its Mimo AI models, which are alleged to have leaked user data to Anthropic.",
    "category": "investigation",
    "comments": [
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbjol9u/",
        "depth": 0,
        "score": 22,
        "author": "Quakercito",
        "excerpt": "You either die as a hero or live long enough to become a villain",
        "posted_at": "2026-09-23T11:36:22.000Z",
        "author_url": "https://www.reddit.com/user/Quakercito/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbjpfo1/",
        "depth": 0,
        "score": 19,
        "author": "VexObserver",
        "excerpt": "This is exactly why I’m paranoid about all the “ZDR” marketing. ZDR is only as strong as every single hop in the chain. If the router doesn’t retain anything but the actual model provider is secretly saving/rerouting your prompts to another model for distillation, then from the user’s perspective the privacy guarantee is basically toast.\n\n What they do explicitly allege is that DeepSeek, Moonshot",
        "posted_at": "2026-09-23T11:41:35.000Z",
        "author_url": "https://www.reddit.com/user/VexObserver/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbkod4k/",
        "depth": 0,
        "score": 7,
        "author": "ReporterCalm6238",
        "excerpt": "wait a second, DeepDeek is super clear about using prompts for training and is also not flagged as ZDR by OpenRouter. Why is it included in this post? What am I missing?",
        "posted_at": "2026-09-23T14:36:26.000Z",
        "author_url": "https://www.reddit.com/user/ReporterCalm6238/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pblmw6y/",
        "depth": 0,
        "score": 5,
        "author": "Polaris_debi5",
        "excerpt": "A couple of details in this writeup go beyond even the sources it links:\n\n There's no confirmed \"official investigation\" anywhere. That claim traces back to one paywalled article in The Information built entirely on anonymous sources, and the article itself says CAC, DeepSeek and Moonshot didn't respond to requests for comment. The \"Kimi executives arrested\" line has zero sourcing, the post even c",
        "posted_at": "2026-09-23T17:02:02.000Z",
        "author_url": "https://www.reddit.com/user/Polaris_debi5/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbk2s3l/",
        "depth": 0,
        "score": 4,
        "author": "ea_man",
        "excerpt": "The alarming part is that the official provider are the ones interested in those practice in order to train their own models.\n\n The positive part is that a 3rd party API provider for an open model could be regarded as more trustworthy, as in if you use a API service in say Europe with a strong data protection and reputation you may sanitize the bad behaviors of the original producer.",
        "posted_at": "2026-09-23T12:55:33.000Z",
        "author_url": "https://www.reddit.com/user/ea_man/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbjscjf/",
        "depth": 0,
        "score": 4,
        "author": "DominikPlays",
        "excerpt": "What if i do not use the official providers since they are not marked as zdr anyway for example deepseek, only eu and usa only ones",
        "posted_at": "2026-09-23T11:58:57.000Z",
        "author_url": "https://www.reddit.com/user/DominikPlays/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbjwg61/",
        "depth": 0,
        "score": 2,
        "author": "Popular-Factor3553",
        "excerpt": "How was anthropic allowed to release this data since technically those Chinese companies are their customers?",
        "posted_at": "2026-09-23T12:22:02.000Z",
        "author_url": "https://www.reddit.com/user/Popular-Factor3553/"
      },
      {
        "url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/comment/pbkeg9z/",
        "depth": 0,
        "score": 2,
        "author": "mikemil828",
        "excerpt": "Never trust the policies of a company you cannot realistically punish. They are only getting nailed here because they sent over the confidential info of those who can.",
        "posted_at": "2026-09-23T13:51:52.000Z",
        "author_url": "https://www.reddit.com/user/mikemil828/"
      }
    ],
    "evidence": [
      "[post] DeepSeek, Moonshot (Kimi), Xiaomi under investigation by Chinese authorities over allegedly leaking user data to Anthropic, covertly modifying both the user's prompt and the returned text.",
      "[post] The makers of DeepSeek, Kimi, Xiaomi Mimo models are all under official investigation by Cyberspace Administration of China..."
    ],
    "virality": "high",
    "post_date": "2026-09-23T11:02:47.000Z",
    "post_kind": "multi_media",
    "post_text": "The makers of DeepSeek, Kimi, Xiaomi Mimo models are all under official investigation by Cyberspace Administration of China, with some rumors suggesting Kimi executives being arrested.\n\nIn short, according to official reports these companies routed their users' requests that were coming from popular 3rd party routers (likely OpenRouter and OpenCode) to Anthropic models, injected a hidden prompt designed to harvest the CoT trace, modified the text returned by the model before passing it to the user, then used that to train their own models.\n\nThe most concerning part is how despite the ZDR (zero data retention) claims and policies of some of these providers, they shared user data with a third party, retained the prompts, trained on the interactions, and now those messages which contained sensitive information were read by Anthorpic employees, who then went on to publish some slighlty redacted versions of those messages:\n\n\"Those sessions contained names, email addresses, company data, and other sensitive data of hundreds of end users in at least a dozen languages. These practices are likely inconsistent with privacy laws and the labs’ own terms of service.\"\n\nExample 1: Internal capital expenditure forecasts for a pharmaceutical company [Original user prompt submitted to a coding assistant of a lab headquartered in China (user accessed the model via a third-party model router)]...",
    "sentiment": "negative",
    "subreddit": "openrouter",
    "event_date": "2026-09",
    "post_title": "DeepSeek, Moonshot (Kimi), Xiaomi under investigation by Chinese authorities over allegedly leaking user data to Anthropic, covertly modifying both the user's prompt and the returned text. This practice raises questions regarding the ZDR credibility of 3rd party routers like OpenRouter and OpenCode",
    "prominence": "core",
    "source_url": "https://www.reddit.com/r/openrouter/comments/1wo2u9l/deepseek_moonshot_kimi_xiaomi_under_investigation/",
    "entity_role": "subject",
    "post_author": "SorosAhaverom",
    "upvote_ratio": 0.9383886255924171,
    "mention_count": 3,
    "mention_surge": true,
    "subreddit_url": "https://www.reddit.com/r/openrouter/",
    "total_upvotes": 185,
    "comments_total": 41,
    "total_comments": 41,
    "other_companies": [
      {
        "name": "DeepSeek",
        "role": "partner",
        "domain": "deepseek.com"
      },
      {
        "name": "Moonshot AI",
        "role": "partner",
        "domain": "moonshot.ai"
      },
      {
        "name": "Anthropic",
        "role": "partner",
        "domain": "anthropic.com"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/SorosAhaverom/",
    "signal_category": "event",
    "comments_included": 15,
    "products_mentioned": [
      "Mimo"
    ]
  }
}

curl https://signals.autobound.ai/v1/signals/739689c7-85e6-5936-a6ad-2e55d8e0b284 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"mi.com","limit":20}'