Threat
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
First reported thehackernews.com
Page published
Earliest dated coverage: 11 Nov 2026 · First observed: 11 Nov 2026 · Latest dated coverage: 11 Nov 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
Grok-built app exposures show why defenders must review publication defaults and access controls before placing confidential business information in AI-generated applications.
Claroc reported that 35,578 of 37,571 Grok-built apps were accessible without signing in, with about one in ten open apps containing internal business or personal data. Exposed content included confidential documents from X and SpaceXSI staff; SpaceXSI removed all 24 identified staff apps but had not removed other users' apps.