# Grok-built apps exposed patient records and SpaceXSI's sales data

> Original title: Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline

- Source: The Decoder
- Published: 2026-11-11T12:53:07.000Z
- Bad Influence: https://badinfluence.news/items/m6mrzk83wz7ywk29e0fjslt7o
- Original: https://the-decoder.com/grok-built-apps-exposed-patient-data-plaintext-passwords-and-spacexsis-own-sales-pipeline/

## Summary

A security firm, Claroc, found that 35,578 of 37,571 still-online apps built with Grok's Build mode were open to anyone with the link. The default "Anyone with the link" setting, plus app addresses that appear in searchable DNS records, exposed patient records, plaintext passwords, and SpaceXSI's own sales documents. SpaceXSI says apps are private until shared and has taken 24 employee apps offline, but has not removed the other open apps.

## Why it matters

The article shows how a default sharing setting and public DNS records exposed sensitive data from over 35,000 Grok-built apps, a risk for any AI app builder.