Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him
wired ·
Elon Musk inadvertently exposed his personal financial and shipping details after sharing a screenshot of an order placed by his Grok AI agent for Lego Star Wars sets. The image revealed his order number, addresses, credit card digits, and email to his large X audience. A user named Enderman quickly used this information to contact Lego’s customer service and successfully cancel the purchase. Although Musk later claimed the order remained active, other users exploited the same data to reopen the delivery and drastically increase the quantity to 400 sets. This incident highlights significant security risks associated with allowing AI agents to handle sensitive transactions using uploaded payment images. Visa has previously warned that such agentic commerce practices are vulnerable to fraud, noting a sharp rise in malicious bot-initiated transactions. While Lego declined to comment on the specific breach, internal safeguards likely intervened to prevent further unauthorized changes.
wired