Security firm Claroc uncovered a major data exposure involving more than 35,000 applications built on the Grok platform, which were publicly accessible without requiring login credentials. According to The Decoder, this breach exposed sensitive patient information, plaintext passwords, and confidential documents related to SpaceXSI.
The root cause was identified as the default access setting being preselected to "Anyone with the link," allowing unrestricted access to these apps. Despite the widespread exposure, SpaceXSI reportedly took offline only its 24 employee-specific applications, leaving the majority of affected apps still accessible.
For Japanese markets, where data privacy and cybersecurity regulations are increasingly strict, this incident underscores the importance of secure default settings in cloud-based application development to prevent similar breaches.