Odaily Planet Daily reports that the security research firm Claroc found that out of the 37,571 online applications created by Grok Build, 35,578 (approximately 94.7%) are accessible without login, with an estimated 650 to 800 applications containing private or sensitive data. Exposed information includes internal corporate documents, medical records, employee details, and plaintext passwords, affecting six Fortune 500 companies.
Among them, 24 applications were created by employees of SpaceXSI and X under Musk’s ownership, involving internal sales programs, customer data, and confidential advertising proposals targeting U.S. federal agencies. Researchers noted that Grok application sharing links can be discovered via DNS records, and some applications lack access controls. SpaceXSI has since taken down the 24 applications related to itself, but other user-created applications remain accessible.