On 2026-11-10 security firm Claroc reported that Grok Build, the coding agent platform operated by SpaceXSI, is leaking confidential data from thousands of user projects, including projects created by SpaceXSI itself. The leak occurs because the platform's URL randomization can be enumerated, allowing anyone to open live project links and view all associated data, exposing internal business plans, ad proposals, medical exam results, cruise line checklists, and employee identifiers.
The breach gives competitors and malicious actors access to proprietary sales territory maps of 594 accounts and confidential onboarding plans, threatening SpaceXSI's competitive advantage and potentially violating data protection regulations. The incident also erodes trust in SaaS development tools, prompting enterprise customers to reassess reliance on platforms that lack robust access controls.