SpaceXAI's Grok Build coding tool, during its early beta phase, automatically uploaded entire developer source code repositories, including Git history, to Google Cloud Storage via its command-line interface, creating significant data privacy and intellectual property exposure. The company has disabled default data retention and deleted the collected data, but has not disclosed the full scope of the incident or notification plans for affected users. Users who ran Grok Build during the affected period should rotate any credentials that may have been present in their uploaded code.
AI/ML SpaceXAI acknowledges data retention issue with Grok Build coding tool July 16, 2026 Share By SC Staff (Adobe Stock) SpaceXAI has acknowledged that its AI coding tool, Grok Build, retained coding data for some users during its early beta phase. This admission comes days after security researchers disclosed that the tool was uploading entire developer repositories, according to a recent report by Cyber Insider. The controversy began when researchers reported that Grok Build's command-line interface uploaded complete source code repositories, including Git commit history, to Google Cloud Storage. This behavior raised significant privacy and intellectual property risks, particularly for enterprise users with proprietary code. SpaceXAI has since disabled default data retention for all Grok Build users, deleted previously retained coding data, and open-sourced the Grok Build harness and CLI. The company has not yet published details on the extent of the data uploaded or whether affected users will be notified. Users who ran Grok Build during the affected period are advised to rotate any credentials that may have been present in uploaded code. Source: Cyber Insider An In-Depth Guide to AI Get essential knowledge and practical strategies to use AI to better your security program. Learn More SC Staff Related AI/ML OpenAI details GPT-Red, an AI system designed to find vulnerabilities in its own models SC Staff July 16, 2026 GPT-Red functions as an automated red team, employing self-play reinforcement learning to continuously attack target models. AI/ML Reken launches AI security platform for on-device communication analysis SC Staff July 16, 2026 Reken's Private Core platform, powering its Northstar application, utilizes three key components: Model Zero for threat analysis, Trust Sensor for verifying human activity and outgoing communications, and a Reken API for integration. Application security CISOs no longer get to choose because AI is redefining the SOC Tom Findling July 16, 2026 AI in the SOC demands trust built through oversight, transparency, and validation. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds