U.S. Intelligence Agencies Name Six Chinese AI Firms in Industrial-Scale Model Distillation Campaign

A joint CISA-NSA-FBI advisory alleges DeepSeek, Alibaba, and others extracted billions of tokens from Claude, GPT, Gemini, and Grok to shortcut their own AI development.

Key points

NSA, CISA, and FBI jointly issued advisory AA26-251A on September 8, 2026, naming six China-based AI companies for industrial-scale distillation of U.S. frontier models.
DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI allegedly extracted billions of tokens from Claude, GPT, Gemini, and Grok variants since at least late 2024.
The advisory says distillation forms the core—not a supplement—of these companies' AI development strategy, likely with Chinese government awareness.

Security advisory

Affected:: U.S. frontier AI models including variants of Claude, GPT, Gemini, and Grok; named actors: DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, Z.AI
Patch status:: Advisory recommends mitigations; no specific patch issued

4 sources 3 web 90% confidence

Source highlights

GizmodoPrimaryU.S. Agencies Issue Stern Rebuke of China-Based AI Companies Over Alleged Distillation—80%

cisa.govWeb contextChina-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies | CISA—64%

technobezz.comWeb contextUS Agencies Warn of Chinese AI Distillation Campaigns—80%

theepochtimes.comWeb contextUS Agencies Accuse China-Based AI Firms of ‘Malicious’ Copying of American Models | The Epoch Times—48%

Full story and ongoing updatesRead full story

Story brief

A joint CISA-NSA-FBI advisory alleges DeepSeek, Alibaba, and others extracted billions of tokens from Claude, GPT, Gemini, and Grok to shortcut their own AI development.

Who should care

DevelopersAudit your API access logs for anomalous query patterns—high-volume, repetitive, or structurally uniform requests that could indicate distillation attempts—and implement rate limiting and behavioral detection.

The advisory describes distillation campaigns routed through APIs and third-party aggregators; developers building on or exposing model APIs need to detect and block extraction patterns.

FoundersReview your terms of service and API usage policies to explicitly prohibit automated distillation and model extraction, and ensure you have enforcement mechanisms.

The advisory emphasizes that named companies operated in breach of provider terms of use; clear contractual prohibitions are a prerequisite for any legal or technical enforcement.

PMsEvaluate whether your product's API tiering and access controls adequately prevent bulk extraction, and consider adding usage-pattern monitoring to your roadmap.

The advisory recommends mitigations against knowledge distillation; PMs responsible for API products should prioritize safeguards that don't unduly burden legitimate users.

What changed

2024 (late)Distillation campaigns against U.S. frontier AI models allegedly began, according to the joint advisory.
2026-09-08CISA, NSA, and FBI released joint cybersecurity advisory AA26-251A naming six China-based AI companies.
2026-09-09Multiple news outlets reported on the advisory; Gizmodo noted upcoming U.S.–China AI security talks as likely context for the timing.