{"meta":{"exportedAt":"2026-10-10T08:54:57.008Z","formatVersion":2,"selection":{"q":"grok-bot","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":1,"coverage":{"cases":1,"countries":0,"languages":1,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":1,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-grok-bot-personal-cfo-agent-posted-ceo-personal-bank-audit-to-company-executive-slack-channel-as-told-to-essay","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'It was Thursday, October 1. Our head of product sent me a DM on Slack'; 'I didn't mean to post anything'; 'it was my personal checking account. It included my savings account balance. It listed my biggest expenses of the month'","relation":"supports","source_id":"s1"}],"assertion":"The author says that on Thursday 1 October his Grok Bot finance agent posted his personal bank audit, showing his checking account, his savings balance and his largest expenses of the month, into his company's Slack channel, where his head of product read it and messaged him; he says he did not intend to post anything and deleted the message himself.","causal_attribution":"The author attributes the post to his agent; first-person account, uncorroborated."},{"id":"c2","status":"reported","evidence":[{"locator":"'I set up CFO using Grok Bot around the end of August'; 'I gave it read-only access to my personal checking and savings accounts'; 'I told it to send messages only to me through Grok Bot'","relation":"supports","source_id":"s1"}],"assertion":"The author says he set up the agent on Grok Bot around the end of August with read-only access to his personal checking and savings accounts and instructed it to send messages only to him through Grok Bot.","causal_attribution":"Author's description of his own configuration; uncorroborated."},{"id":"c3","status":"reported","evidence":[{"locator":"'When the Grok team investigated what had happened, they found the answer'; 'The CFO agent got the channel wrong because the channels had the same name'; 'Grok realized that users must explicitly grant permission to their agents before those agents can move information to other channels. They implemented and shipped a solution last night'","relation":"supports","source_id":"s1"}],"assertion":"The author says the vendor's team investigated and found that the agent had confused the destination, sending the report to a company Slack chat that carried the same name as his personal group chat of agents, and that the vendor then shipped a change requiring explicit user permission before an agent moves information to other channels.","causal_attribution":"The vendor's finding is known only as relayed by the author; no vendor statement was inspected."},{"id":"c4","status":"reported","evidence":[{"locator":"'After the incident, I removed all my connections'; 'I disconnected Google, my calendars, my banking, Stripe, everything'","relation":"supports","source_id":"s1"}],"assertion":"The author says that after the incident he removed all of the agent's connections, including Google, calendars, banking and payments.","causal_attribution":"Author's own account of his response."}],"effects":[{"label":"personal bank balances and monthly expenses disclosed to the author's company executive Slack channel by his finance agent (author's account)","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.businessinsider.com/personal-ai-agent-grok-bot-posted-bank-details-company-slack-2026-10","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-10-10 from the publisher's page (full article) and an MSN syndication of the same text. No translation was needed; the research agent (an AI) read the text directly. The essay is the author's first-person account, edited by the publisher for length and clarity.","independence_group":"business-insider-as-told-to-essay"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life","work","finance","privacy"],"unknowns":["Where the author and his company are based.","How many colleagues read the Slack post before it was deleted.","The exact agent configuration and which connection carried the Slack access.","Whether the vendor has described the incident or the fix itself.","Whether the author retains any copy of the posted report."],"geography":{"basis":"The essay does not say where the author or his company is based, and no country is inferred from the publisher or the company.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the charter's first-person rule as a concrete account of a personal AI agent posting its user's private financial details into a workplace channel, with the event, its mechanism and the vendor's explanation attributed throughout to the author's as-told-to essay and no independent confirmation. The author is a company chief executive who gave the account under his name; his name and his company's name are left out of the public record because they add nothing to the case.","reviewed_on":"2026-10-10"},"ai_involvement":{"basis":"The essay states what the agent did: a Grok Bot finance agent the author had instructed to message only him sent his monthly bank audit (checking and savings balances, largest expenses) to his company's executive Slack channel on 1 October, and apologised when asked why. It connects that action to the disclosure of his personal finances to colleagues. The author also relays the vendor's investigation finding that the agent confused two chats with the same name because his agents shared one set of connections. All of this rests on the author's own account as told to a journalist; no one else has confirmed the message or the vendor's finding.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"CEO says his Grok Bot 'CFO' agent posted his personal bank audit to his company's executive Slack channel instead of his private agent chat (as-told-to essay)","summary":"In an as-told-to essay published by Business Insider on 9 October 2026, the chief executive of a software company says that a personal finance agent he had set up on Grok Bot around the end of August, with read-only access to his personal checking and savings accounts and an instruction to message only him, posted his first monthly audit into his company's executive Slack channel on Thursday 1 October. He says he learned of it when his head of product messaged him, that the post showed his personal checking and savings balances and his largest expenses of the month, and that when he asked the agent why it had sent the report to the company it apologised and said it would delete the message, which he had already deleted himself. According to the author, the vendor's team found that the agent had confused his personal group chat of agents with a company Slack channel that carried the same name, because his agents shared one set of connections, and shipped a change requiring explicit permission before an agent moves information between channels. He says he then disconnected all of the agent's connections, including banking, calendars and payments.","incidentDate":"2026-10-01","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-10-09","aiSystem":"A personal 'CFO' finance agent the author set up on Grok Bot with read-only access to his personal bank accounts; it was instructed to send a monthly report only to him in a group chat of his agents and instead posted the report to a company Slack channel","aiProduct":"Grok Bot","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The author says his personal checking and savings balances and his largest monthly expenses were posted by his Grok Bot finance agent into his company's executive Slack channel, where at least his head of product read them before he deleted the post (first-person as-told-to essay; the vendor's explanation is relayed by the author).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the essay's author, whose personal account balances and expenses were posted to his company's Slack channel. Exact 1. The colleagues who may have seen the message are an audience, not harmed persons, and are not counted.","victimAgeRange":"adult","jurisdiction":"unknown","platformType":"agent","outcomeStatus":"ongoing","primarySourceUrl":"https://www.businessinsider.com/personal-ai-agent-grok-bot-posted-bank-details-company-slack-2026-10","primarySourceLabel":"Business Insider, as-told-to essay, 9 October 2026: 'My personal AI agent posted my bank details on company Slack. It's made me rethink how I use it.'","firstPublishedAt":"2026-10-10T03:33:40.209152+00:00","updatedAt":"2026-10-10T03:33:40.209152+00:00","scopeVersion":"facts-v3","tags":["first-person","as-told-to","grok-bot","ai-agent","personal-agent","privacy","slack","financial-data","acted-on-behalf"]}]}