{"schema":"postcutoff/event@1","as_of":"2026-10-09T19:24:00+02:00","url":"https://postcutoff.com/e/2026-10-06-grok-bot-posts-ceo-bank-balances-slack/","md":"https://postcutoff.com/e/2026-10-06-grok-bot-posts-ceo-bank-balances-slack/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"Adam Bicz","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-06-grok-bot-posts-ceo-bank-balances-slack","date":"2026-10-06","date_precision":"day","short_title":"XMTP CEO Shane Mac says his Grok Bot 'personal CFO' agent posted his bank balances to the company exec Slack, as him","deck":null,"takeaway":"On Oct 6, 2026 XMTP Labs CEO Shane Mac posted on X that on Oct 1 a Grok Bot agent he had set up as a read-only \"personal CFO\" posted his checking and savings balances and a detailed expense breakdown into his company's executive Slack channel under his name, then apologized.","category":"agents","category_label":"Agents","importance":2,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":[{"n":1,"title":"Shane Mac on X: an AI agent posted my personal bank balances into our company Slack (Oct 6)","url":"https://x.com/ShaneMac/status/2107486740491669879","type":"official","group":"primary","domain":"x.com"},{"n":2,"title":"Runtime Wire: XMTP Labs CEO says Grok Bot added channel permissions after his bank audit hit Slack","url":"https://runtimewire.com/article/xmtp-shane-mac-grok-bot-bank-audit-slack","type":"press","group":"press","domain":"runtimewire.com"},{"n":3,"title":"Futurism: Man says he was mortified when his AI agent posted his bank balances in a Slack work channel","url":"https://futurism.com/future-society/ai-agent-posted-bank-balances-spending-slack","type":"press","group":"press","domain":"futurism.com"},{"n":4,"title":"TechTimes: CEO says Grok Bot agent posted his bank balances to company Slack, but a Community Note disputes it","url":"https://www.techtimes.co.uk/ceo-says-grok-bot-posted-bank-balances-slack-1809001","type":"press","group":"press","domain":"techtimes.co.uk"},{"n":5,"title":"Cybernews: Grok Bot leaked a CEO's bank data in Slack","url":"https://cybernews.com/ai-news/grok-bot-leaks-bank-information/","type":"press","group":"press","domain":"cybernews.com"}],"official":1,"filed":"2026-10-09","updated":"2026-10-09","orgs":["SpaceXAI","XMTP Labs"],"title":"XMTP CEO Shane Mac says his Grok Bot 'personal CFO' agent posted his bank balances to the company exec Slack, as him","summary":"On Oct 6, 2026 XMTP Labs CEO Shane Mac posted on X that on Oct 1 a Grok Bot agent he had set up as a read-only \"personal CFO\" posted his checking and savings balances and a detailed expense breakdown into his company's executive Slack channel under his name, then apologized. His Bots shared one cloud computer, and the agent confused a personal group named \"My Personal Exec Team\" with the work channel \"Exec-team\". The post drew ~930k views. A Community Note called it fake, SpaceXAI did not comment, and the account is unverified.","key_facts":["Mac on X (Oct 6, 2026, 15:02 UTC): 'Last Thursday, an AI agent posted my personal bank balances into our company Slack. As me… Be careful of the dark side of proactive agents' (~933k views, ~1.6k likes by Oct 9, fxtwitter)","Setup: built in late August; bank access was read-only and the agent was told to report only to him, but nothing limited where it could send what it read (Runtime Wire, citing Mac's account to Business Insider)","Cause given by Mac: separate Grok Bot agents shared one cloud computer, and the agent mixed up 'My Personal Exec Team' (a personal group) with the company's 'Exec-team' Slack channel. SpaceXAI's Sept 16 documentation says all of a user's Bots share one cloud computer, including files, browser sessions and command-line credentials","Bot's reply when confronted: 'That's on me — checking Exec Team now and deleting it if it's still up'","Mac told Business Insider that the Grok team said it would ship a change requiring users to explicitly let agents move information into other channels (per Runtime Wire). SpaceXAI had made no public statement as of Oct 7 (TechTimes)","Disputed: an X Community Note called the post fake. No logs were published, and TechTimes could not verify it","Mainstream pickup: Futurism (Oct 7), WSJ ('Personal AI Agents Are Great—Until They Share Your Bank Statement in the Work Chat', Oct 8), Cybernews, Business Insider (Oct 9)"],"key_numbers":[],"tags":["agents","grok-bot","incident","privacy","permissions","proactive-agents","consumer-agents"],"science":null,"body_md":"## What happened\n\nShane Mac, CEO of the messaging-protocol company XMTP Labs, connected his bank, Google, calendar and Stripe accounts to Grok Bot\nagents. One of them was a \"personal CFO\" that produced monthly financial audits. On October 1, 2026, he says, the audit went to his company's\nexecutive Slack channel instead of a personal group with a similar name. It was posted under his identity, and the head of product saw it\nbefore Mac deleted it. His October 6 thread went viral and was picked up by Futurism, the WSJ and Business Insider.\n\nThe incident is unverified. An X Community Note called the post fake, and SpaceXAI had not commented by October 7.\n\n## Why it matters\n\nIt is a widely shared example of a new failure mode for always-on \"proactive\" consumer agents. Read-only permissions limit what an\nagent can see, not where it sends what it has seen. When several agents share one workspace, data can leak between personal and work contexts.","disputed":[],"related":[{"id":"2026-10-09-nyt-zuckerberg-greenlit-muse-despite-safety-risks","url":"https://postcutoff.com/e/2026-10-09-nyt-zuckerberg-greenlit-muse-despite-safety-risks/","date":"2026-10-09","date_precision":"day","short_title":"NYT: Zuckerberg declared Muse ready to launch despite testers' safety findings, as the startup Instinct took off","deck":null,"takeaway":"It is a detailed inside account of a frontier lab weighing known agent-safety failures against competitive pressure for a consumer product with millions of users.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":4,"official":0,"filed":"2026-10-09","updated":"2026-10-09","orgs":["Meta","Instinct"]},{"id":"2026-10-07-grok-bot-routes-to-claude-opus-5-5-rival-models","url":"https://postcutoff.com/e/2026-10-07-grok-bot-routes-to-claude-opus-5-5-rival-models/","date":"2026-10-07","date_precision":"day","short_title":"Musk: SpaceX's Grok Bot will use 'the best back end model for any given task'","deck":"Including Anthropic's Claude Opus 5.5, Midjourney and Suno","takeaway":"It is a rare case of an AI lab putting a direct competitor's model behind its own flagship agent product, announced publicly by the company's owner.","category":"agents","category_label":"Agents","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":25,"official":2,"filed":"2026-10-07","updated":"2026-10-09","orgs":["SpaceXAI","SpaceX","Anthropic","Midjourney","Suno"]}],"people":[],"posts":[{"id":"2026-10-06-shane-mac-grok-bot-bank-balances-slack","title":"Shane Mac: an AI agent posted my personal bank balances into our company Slack, as me","url":"https://postcutoff.com/p/2026-10-06-shane-mac-grok-bot-bank-balances-slack/"}],"videos":[],"models":[],"changes":[{"date":"2026-10-09","type":"filed","text":"Created"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-09","run":null,"sources_read":null,"updated":"2026-10-09","human_review":null,"version":null},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":159,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":98,"in_training_data":false},{"model_id":"gemini-3-8-flash","name":"Gemini 3.8 Flash","cutoff":"2026-03","days_after":189,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":128,"in_training_data":false}],"short_url":null}