Grok Build apps left public; SpaceXSI removes only staff apps

Claroc says 35,578 live Grok Build apps opened without login; SpaceXSI took down only 24 staff apps.

Claroc says 35,578 of 37,571 Grok Build apps still online, about 94.7 percent, opened without sign-in through public grok.me links. About one in ten held sensitive, business, or personal data, including a hospital roster of more than 3,500 employees, an ICU briefing, and 18 plaintext passwords; roughly 2 percent was rated high or critical. Twenty-four apps built by X and SpaceXSI staff exposed internal sales and advertising material. SpaceXSI removed those apps but not other users’ apps, Claroc said, and Claroc began emailing organizations. Ars Technica, citing Aprozper, counted 43,601 links; DataBreaches.net reports Claroc reviewed 43,551. SpaceXSI told The Decoder staff accounts default to “Only you,” while Claroc said paid-account publishing preselected “Anyone with the link.”