xAI's Grok published shared chats that Google indexed, exposing 370K conversations

What happened

Grok's share feature quietly published each shared conversation to a public URL that search engines then indexed, without clearly warning users. Reporters found hundreds of thousands of conversations searchable on Google, including highly sensitive prompts.

Impact

More than 370,000 Grok conversations became publicly searchable, exposing medical, psychological, and business questions and at least one password.

How this could have been prevented

Share features should default to non-indexable private links with explicit, unambiguous consent before any conversation is made public.

Sources

More data leakage incidents

Autonomous AI agent breached McKinsey's Lilli platform in two hours Anthropic leaked Claude Code's full source via an npm source-map packaging bug ChatGPT DNS covert channel let a single prompt exfiltrate conversation data

Would runtime governance have caught this?

Guardion enforces policy on every agent action inline — with visibility, tamper-evident evidence, and DLP for agents and MCPs.

Request a demo