Grok's share button published 370,000 conversations to search engines
What happened
Grok's share feature created public pages that search engines indexed with no warning to users. Forbes found more than 370,000 conversations searchable on Google, including medical questions, uploaded files and at least one password.
When a Grok user pressed the share button, xAI created a unique public web page for the conversation, with no warning that the page could be found by anyone. Search engines including Google indexed those pages, and Forbes found more than 370,000 Grok conversations searchable online. They included medical and psychological questions, uploaded documents and spreadsheets, at least one password, and requests for dangerous material that Grok had answered, such as instructions for making drugs and weapons, despite xAI's own rules against it.
How it happened
Leaky AI product: Accidental publication. A product feature, share link or software release made private data public by mistake.
The AI involved was from xAI, specifically Grok. The product was Grok, a type of chatbot.
Impact
Data was exposed. Data involved: chat logs and personal data. The impact was confined to one organization and its users or customers. Sources give a figure of 370,000.
Severity is rated Medium, calculated from how far the incident reached and how sensitive the data was.
Was the AI at fault?
No. The failure was in the systems, settings or people around the AI, not in the model's behaviour.
Status and timeline
Reported in the press or by researchers, but not confirmed by the affected organization, the AI vendor or a regulator.
It became public on 20 Aug 2025.
xAI did not respond to requests for comment when the exposure was reported.