Grok-built apps expose patient data, passwords, and SpaceXSI sales pipeline
security firm claroc found 94.7% of 37,571 grok-built apps publicly accessible, exposing sensitive data including patient records and plaintext passwords.
claroc found 94.7% of 37,571 grok-built apps were publicly accessible without login due to insecure default publishing settings and flawed access controls. exposed data includes patient records, plaintext passwords, and confidential business documents from spacexsi and x. 24 apps from spacexsi and x employees were accessible, including a confidential onboarding plan and sales territory map. claroc estimates 650-800 apps contained private data, affecting spacexsi, x, and 30 other organizations.