- Who
- Claroc
- What
- found thousands of exposed Grok Build projects containing confidential user data
What happened
Security firm Claroc found that Grok Build, a coding agent from SpaceXSI, exposed thousands of users’ live projects through share links. The leaked data included internal business plans, medical exam results, employee names and ID numbers, and material from 24 apps built by SpaceXSI itself, including a confidential onboarding plan and a sales territory map of 594 accounts.
Read next
See the full storyClaroc Finds Grok-Built Apps Exposed, SpaceXSI Takes Employee Apps OfflineReported by 2 sources
The story so far
Security firm Claroc found that 35,578 of the 37,571 Grok-built apps it checked could be opened by anyone with the link. About one in ten of those accessible apps contained sensitive or personal information, Claroc said, and it estimated that 650 to 800 apps held private data. Exposed information included patient records, plaintext passwords and SpaceXSI sales data. An app becomes accessible at its grok.me address when its creator clicks “Publish.” SpaceXSI took 24 employee-built apps offline, while Claroc said it was notifying other affected owners.
How the story developed · 2
View full event- 11/11 21:15 (UTC+8)Grok-Built Apps Exposed Patient Data, Plaintext Passwords, and SpaceXSI Sales DataThe Decoder
- 11/11 06:07 (UTC+8)
Grok Build Coding Agent Exposes Thousands of User Projects This report