Claroc researchers walked 43,551 addresses under grok.me, the domain where SpaceXSI, the company formerly called xAI, publishes apps users describe into existence in Grok’s Build mode. Of the 37,571 addresses still online on November 8, 35,578 (94.7%) opened with no sign-in, from a plain incognito window and no account.

What sat behind that default:

  • An onboarding plan for a new member of SpaceXSI’s own enterprise sales team, marked confidential, naming internal systems, 19 internal chat channels and a 30-day plan.
  • A sales territory map of 594 strategic accounts with pipeline, and eight X advertising proposals including one to a US federal agency marked confidential.
  • An ICU patient’s lab results, a hospital group’s staff list, and a timesheet application that hands out employee passwords.
  • Internal data from 30 identified organizations, 26 of them above 1,000 employees and six in the Fortune 500.

Claroc traces two settings. In the account it used, clicking Publish on an app Grok had just built proposed Anyone with the link as the access setting. In a team app built for the researchers, Continue with Google let any Google account read, edit and delete records, a flaw they tested only on their own app.

SpaceXSI says employee apps start out private, and after the report it took down the 24 apps built by its own staff and by X employees. The rest of the open apps stayed up.

Related: Microsoft Patents Training AI on Volunteers’ Idle Gaming GPUs, OpenAI Builds Control Room to Halt Model Workloads Within 35 Seconds

GhostShares 2: Grok Apps Exposed xAI’s Business Secrets and People’s Private Data · Source channel