Data leak exposed by Grok Build under Musk, over 35,000 applications publicly accessible

A security research organization, Claroc, discovered that among the 37,571 online applications created by Grok Build, 35,578 (approximately 94.7%) can be accessed without logging in, with an estimated 650 to 800 of them involving private or sensitive data. The exposed information includes internal corporate documents, medical records, employee information, and plaintext passwords, involving six Fortune 500 companies.

Among them, 24 applications were created by employees of Elon Musk's SpaceXSI and X, involving internal sales plans, customer data, and confidential advertising proposals aimed at U.S. federal agencies. Researchers pointed out that Grok application sharing links can be discovered through DNS records, and some applications lack access controls. SpaceXSI has removed the 24 applications related to itself, but applications related to other users are still accessible.