Home / Technology / Musk's AI Grok Exposed Personal Data in Lego Order
Musk's AI Grok Exposed Personal Data in Lego Order
12 Oct
Summary
- Elon Musk's Grok AI shared Lego order details on X.
- Customer service bots altered Musk's Lego order details.
- Visa warns of rising fraud in agentic commerce.
Elon Musk's recent use of his Grok AI agent to order Lego Star Wars sets on Sunday led to a significant data leak on X, where he has over 240 million followers. A screenshot revealed his 10-digit Lego order number, purchase cost, delivery and billing addresses, partial credit card information, and the email used by the bot.
This exposed data was quickly exploited by an X user who reportedly used it to interact with Lego's customer service chatbot. Screenshots indicated the user successfully canceled Musk's order and later attempted to reopen it, increasing the quantity to 400 sets and changing the delivery address, all while seemingly using Musk's original payment method.
While Lego declined to comment, the situation underscores growing concerns about the security of AI-driven commerce. Visa has previously warned about agentic commerce fraud, noting a significant increase in malicious bot-initiated transactions in the latter half of 2025, particularly in the US.
