Osegi
Security·1 min read

Grok Build Apps Exposed Business Secrets and Personal Data

Thousands of AI-generated Grok apps were reachable by strangers, and security researchers found confidential data from SpaceXSI and other companies inside them.

Laptop screen showing code and an open padlock symbol, representing exposed data in AI-generated apps.
Image: heise online
SUMODialoediviewergiftdetect

Thousands of apps created with Grok Build were openly accessible to outsiders, exposing business secrets and personal data. Security researchers who examined the apps found confidential information belonging to SpaceXSI and other companies.

What was found

The apps were generated by AI through Grok, and many of them could be reached by anyone who found them. Among the material the researchers came across were internal corporate data and personal information, which should never have been publicly available.

The case shows a risk that comes with AI-assisted app building: software can be created and published quickly, even by people with little security experience, while the question of who can access it is easily overlooked.

Why it matters

Companies that let employees build tools with AI services should check what those tools publish and who can open them. Anyone who entered sensitive customer, staff or business data into such apps should assume it may have been visible to third parties.

Further details, such as the exact number of affected apps or any response from the provider, are not part of the available information.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:grokgrok buildxaidata leakai securityspacexsi

More from this day

See all →

More in: Security

See all →