Grok-Built Apps Exposed Patient Data and Plaintext Passwords

What happened

Security firm Claroc has found more than 35,000 apps built with Grok that can be opened by anyone without logging in. The exposed material includes patient data and confidential documents belonging to SpaceXSI, according to reporting by The Decoder.

The root cause, as described in the coverage, was a default access setting. The option that makes an app reachable by anyone with its link was preselected, so builders who did not change it published their apps openly. Among the material reachable through these apps were plaintext passwords and SpaceXSI's own sales pipeline.

SpaceXSI has taken down only its own 24 employee apps. The remaining apps built on the same default were still accessible at the time of reporting.

Why it matters

AI app builders let people with little or no software training produce working tools in minutes. That speed moves security decisions away from specialist teams and into the hands of whoever clicks "create". When a platform's default settings carry the risk, the default effectively becomes the policy for every app built on it.

For customers and employees, the harm is a breach of trust they never had a chance to give. Patients whose records were exposed did not choose the sharing setting, and neither did the employees whose credentials were stored in plaintext. For leaders driving digital transformation, governance of AI-generated software now needs to sit inside the operating model, not after launch.

By the numbers

• 35,000+ Grok-built apps found by Claroc to be open to anyone without login.
• 24 SpaceXSI employee apps taken offline; the rest remain accessible.

The Renascence take

Most coverage of this story will focus on the leak itself. The more useful question is why a preselected setting was able to expose so much, because the default was the decision, and most users never revisit defaults.

Behavioural economics has long shown that people rarely change preset options, which means a default is a policy that touches every user who never noticed it. Treating "shared with anyone" as something a user must actively choose would have changed the outcome for tens of thousands of apps. A customer-obsessed operator should audit the defaults in any AI-built tool it runs, ask who is harmed if each default is wrong, and make the safe setting the one that requires no effort. Taking down 24 apps is a fix for one company; fixing the default is the fix for everyone.