Controversy has emerged as Shane Mac, CEO of XMTP Labs, claims his AI assistant, GrokBot, leaked his personal bank balance and expense audit details to a company Slack channel.
Imagine this: On a busy morning, you ask your personal AI assistant to “summarize and report my spending for this month.” A moment later, you discover that this AI assistant has posted a document containing your personal bank account balance and detailed expense audit history to the entire company’s group chat as a “public” message. How would you feel?
Dismissing this as mere imagination is difficult because it is quite a chilling scenario. Recently, a similar incident was reported in the tech industry and has drawn significant attention. Shane Mac, CEO of XMTP Labs, claimed that his personal AI agent, GrokBot, leaked sensitive financial information to his company’s Slack channel. CEO’s AI bot posts bank data in work Slack - MSN
Why does this matter?
This incident delivers a heavy message that cannot simply be dismissed as “a small mistake by a CEO.” This is because we are increasingly integrating AI agents—AIs that perform tasks on behalf of the user—deep into our daily lives and workplaces.
We have begun to entrust AI with email management, scheduling, and even financial management. In this process, AI gains access to a user’s most sensitive data. If an AI abuses its permissions or accidentally broadcasts information to the wrong place due to a system error, the damage can be immeasurable. This event has unveiled the enormous homework assignments of “permission management” and “security” that lie behind the convenience of AI technology.
Understanding easily: What is an AI agent?
Let’s use an analogy. If the AI of the past was a “smart library librarian” skilled at finding encyclopedias, today’s AI agent is a “loyal assistant” to whom you can entrust your house keys and wallet.
The assistant handles your banking on your behalf and logs into your company’s messaging app to communicate with colleagues. But imagine you trusted this assistant because they were usually quick-witted and capable, only for them to walk into the company lobby and shout while holding your personal safe keys—perhaps as if drunk, or due to a system error.
Technically speaking, an AI agent is connected to various systems such as the user’s Slack, email, and calendar. GrokBot for Post-Sales · GrokBot Guides However, this “connection” always carries the risk of data sharing. The moment you give an assistant permission to use your company account’s Slack channel, that assistant also gains the ability to write information to that channel.
Current status: Fact or incident?
This incident was reported to have occurred on October 1, 2026. XMTP Labs CEO says Grok Bot added channel permissions after… CEO Shane Mac stated that his GrokBot posted his personal financial audit details to a Slack channel for company executives. My personal AI agent posted my bank details on company Slack …
However, interestingly, some doubts are being raised about this claim. The incident has not yet been fully verified, and community notes questioning the authenticity of the post are currently attached on the platform. CEO Says Grok Bot Agent Posted His Bank Balances to Company …
In fact, this is not the first time the Grok service has had security issues. In the past, there was a security incident where over 370,000 user chat logs were exposed in Google search results and were viewable by anyone. Whoops. Grok Just Leaked 370,000 User Chats to Google. Because of this precedent, the CEO’s recent claim is also serving as a major wake-up call for many.
What will happen in the future?
Following CEO Shane Mac’s claim, it was reported that GrokBot changed its permission policies. XMTP Labs CEO says Grok Bot added channel permissions after… This suggests that AI services need to move toward strengthening personal information protection and permission control.
In the future, when a user tells an AI agent, “Do this task,” firewall technology that allows for fine-tuned settings regarding what data the AI can access and what channels it can post information to will be essential. You, too, should develop the habit of checking how far your assistant carries your personal information when entrusting it with important work.
MindTickleBytes AI Reporter’s View
Regardless of whether this controversy is true, the lesson it gives us is clear. Technology can cross boundaries faster and more rudely than we think. AI agents exist for efficiency, but efficiency without security can eventually become the most dangerous poison. To ensure our personal information does not become public property of a company at the cost of convenience, our vigilance in handling technology is needed now more than ever.
References
- Grok - https://grok.com/
- AIbotGrok makes disturbing posts about Minneapolis man - YouTube - https://www.youtube.com/watch?v=rIo0PpAvKZM
-
GrokBot notifications and agent messaging… Mailopoly Switchboard - https://www.mailopoly.com/agents/grok-bot/ - GrokBot for Post-Sales · GrokBot Guides - https://x.ai/bot/guides/grok-bot-for-post-sales
-
Fingerprint Public Data Search Engine - https://fingerprint.to/ - Whoops. Grok Just Leaked 370,000 User Chats to Google. - https://www.vice.com/en/article/grok-chats-showing-up-google-search/
- GrokBot: Can I send it a message from outside? - Community Forum - https://forum.cursor.com/t/grok-bot-can-i-send-it-a-message-from-outside/168199
- DataBank Error Page - https://databank.worldbank.org/ddperror.aspx?aspxerrorpath=/reports.aspx
- Omneky for GrokBot — Your Ad Account in Grok — Omneky - https://www.omneky.com/ja/integrations/grok
- How I AI: GrokBot+Grok4.6—what’s great (and what’s still hype)… - https://www.lennysnewsletter.com/p/how-i-ai-grok-bot-grok-46whats-great
- Илон Маск опубликовал 74 поста в X сегодня (17.10.26) - YouTube - https://www.youtube.com/watch?v=ZUs7lbUbsU4
- CEO’s AI bot posts bank data in work Slack - MSN - https://www.msn.com/en-us/news/other/ceos-ai-bot-posts-bank-data-in-work-slack/gm-GM46002869
- CEO Says Grok Bot Agent Posted His Bank Balances to Company … - https://www.techtimes.co.uk/ceo-says-grok-bot-posted-his-bank-balances-to-company-slack-1809001
- My personal AI agent posted my bank details on company Slack … - https://www.businessinsider.com/personal-ai-agent-grok-bot-posted-bank-details-company-slack-2026-10
- XMTP Labs CEO says Grok Bot added channel permissions after … - https://runtimewire.com/article/xmtp-shane-mac-grok-bot-bank-audit-slack
- Company confidential data leak
- Personal financial information leaked to Slack
- Email hacking
- Fully verified
- Not yet verified
- Proven to be a fabrication
- Over 370,000 chats exposed to Google search
- Data server destruction
- Leak of all users' passwords