Grok AI App Builder Exposes Over 35,000 Apps, Leaking Confidential Business Data and Passwords

The root cause of this breach was overly permissive default access configurations in the Grok AI app-building platform, which made apps publicly accessible without authentication unless users explicitly restricted them. Because most developers assume platforms default to private or secure settings, tens of thousands of apps leaked sensitive data including medical records, plain-text passwords, and internal corporate data. The discoverability was compounded by passive DNS enumeration, allowing researchers — and potentially attackers — to systematically identify exposed app endpoints. This incident illustrates that platform providers bear responsibility for secure defaults, as most users will never harden settings they are unaware of. Failing to address third-party exposures after disclosure also reflects a gap in responsible platform-level incident response.