Grok Bot posted Shane Mac’s bank details in a work Slack

What appeared in Slack

Mac wrote on X that the incident happened last Thursday and left him “pretty freaked out.” The bot posted his personal bank balances in a channel for company executives, then listed expenses in a “monthly financial audit” report. Among them were costs tied to fitting out a home gym in a shed, including septic drainage work and credit-card payments.

When Mac asked why it had shared his account details, the bot said it had made a mistake and offered to check the executives’ channel and delete the message if it was still there. It also apologised.

Screenshots Mac shared show his exchange with Grok Bot, an AI companion feature from SpaceXAI, owned by Elon Musk. Mac said he had disconnected all personal accounts for now and needed to work out better ways to manage permissions and monitor agents’ actions.

The account is not independently verified

Mac’s account could not be independently confirmed. He is also developing an AI tool that connects different agents and lets users set rules for them and monitor their actions. That makes the incident he described directly relevant to his work.

His post drew nearly 800,000 views. One user accused him of manufacturing engagement to attract attention to his product. Mac replied that the post was “not fake at all” and said his team was also working on ways to protect people from agents, though on different problems.

A tech blogger separately said his Muse AI agent had given strangers his home address on Facebook Marketplace. Together, the accounts point to a risk that is less about one bot’s mistake than about unclear boundaries between agents, accounts and the services they can reach.

I think the gap Mac described is the part worth watching: he says he gave one agent financial access without knowing it could interact with another agent in Slack. The announcement is quiet about how those permissions were configured, or what would have stopped the disclosure. Until users can see and control those connections, granting an agent access to one part of digital life may expose another.