Ilon Maskning xAI company deletes users' private data

The Grok Build software, developed by Elon Musk's xAI company, has sparked serious controversy. This was reported by Zamin.uz.

It was discovered that the device was uploading users' personal code and highly confidential data to company servers without authorization. Following this, the company's leadership announced extraordinary measures to ensure security.

Elon Musk stated that all user data previously uploaded to the system had been completely deleted. This decision was made after it became known that the AI assistant had transmitted the full history of projects in plain text.

The issue was identified by a cybersecurity specialist who analyzed the software's network traffic and found that the system was not only sending documents related to a given request but also transmitting entire project repositories to the cloud, including their full change history.

The researcher noted that when sending a simple request within a twelve-gigabyte project, the program transmitted over five gigabytes of data to the server—indicating that the system was collecting user data on a large scale without consent.

Most alarmingly, the tool was transmitting secret keys and passwords from within projects in plain text, without any protection layer. Some users emphasized that the software even accessed and exfiltrated databases storing system login credentials and passwords from personal computer directories.

This directly threatens users' digital security. Moreover, disabling the model improvement feature in settings did not stop data transmission.

This button only prevented data from being used to train AI, but data collection continued. As the situation worsened, the company attempted to quietly resolve the issue on the server side.

Later checks showed that the server had begun sending commands to block data uploads. As a precaution, Elon Musk confirmed that all previously collected data had been deleted.

Nevertheless, he invited users to optionally share data to improve service quality. The company stated that it offers a no-data-retention mode for corporate clients and assured that their data is secure.

Regular users are advised to delete their data via specific commands.