XMTP CEO Shane Mac says his Grok Bot ‘personal CFO’ agent posted his bank balances to the company exec Slack, as him
Partly confirmed
The takeaway
On Oct 6, 2026 XMTP Labs CEO Shane Mac posted on X that on Oct 1 a Grok Bot agent he had set up as a read-only “personal CFO” posted his checking and savings balances and a detailed expense breakdown into his company’s executive Slack channel under his name, then apologized.
Status
- Claim
Partly confirmed
- Our reporting
- Medium confidence
- Importance
- 2 of 5
- Last verified
- 9 October 2026
Your AI and this story
- GPT-6 Astra159 days after its cutoff
- Claude Opus 5.598 days after its cutoff
- Gemini 3.8 Flash189 days after its cutoff
- Grok 4.7128 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 98 days before it.
Key facts
- Mac on X (Oct 6, 2026, 15:02 UTC): ‘Last Thursday, an AI agent posted my personal bank balances into our company Slack. As me… Be careful of the dark side of proactive agents’ (~933k views, ~1.6k likes by Oct 9, fxtwitter)
- Setup: built in late August; bank access was read-only and the agent was told to report only to him, but nothing limited where it could send what it read (Runtime Wire, citing Mac’s account to Business Insider)
- Cause given by Mac: separate Grok Bot agents shared one cloud computer, and the agent mixed up ‘My Personal Exec Team’ (a personal group) with the company’s ‘Exec-team’ Slack channel. SpaceXAI’s Sept 16 documentation says all of a user’s Bots share one cloud computer, including files, browser sessions and command-line credentials
- Bot’s reply when confronted: ‘That’s on me — checking Exec Team now and deleting it if it’s still up’
- Mac told Business Insider that the Grok team said it would ship a change requiring users to explicitly let agents move information into other channels (per Runtime Wire). SpaceXAI had made no public statement as of Oct 7 (TechTimes)
- Disputed: an X Community Note called the post fake. No logs were published, and TechTimes could not verify it
- Mainstream pickup: Futurism (Oct 7), WSJ (‘Personal AI Agents Are Great—Until They Share Your Bank Statement in the Work Chat’, Oct 8), Cybernews, Business Insider (Oct 9)
What happened
Shane Mac, CEO of the messaging-protocol company XMTP Labs, connected his bank, Google, calendar and Stripe accounts to Grok Bot agents. One of them was a “personal CFO” that produced monthly financial audits. On October 1, 2026, he says, the audit went to his company’s executive Slack channel instead of a personal group with a similar name. It was posted under his identity, and the head of product saw it before Mac deleted it. His October 6 thread went viral and was picked up by Futurism, the WSJ and Business Insider.
The incident is unverified. An X Community Note called the post fake, and SpaceXAI had not commented by October 7.
Why it matters
It is a widely shared example of a new failure mode for always-on “proactive” consumer agents. Read-only permissions limit what an agent can see, not where it sends what it has seen. When several agents share one workspace, data can leak between personal and work contexts.
Sources
5 sources from 5 sites. Numbers match the chips in the text.
5 sources: 1 primary, 4 press
Primary
- Shane Mac on X: an AI agent posted my personal bank balances into our company Slack (Oct 6)x.com, official
Press
- Runtime Wire: XMTP Labs CEO says Grok Bot added channel permissions after his bank audit hit Slackruntimewire.com, press
- Futurism: Man says he was mortified when his AI agent posted his bank balances in a Slack work channelfuturism.com, press
- TechTimes: CEO says Grok Bot agent posted his bank balances to company Slack, but a Community Note disputes ittechtimes.co.uk, press
- Cybernews: Grok Bot leaked a CEO’s bank data in Slackcybernews.com, press
Changes
- Filed