Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him (www.wired.com)

Elon Musk recently showcased the capabilities of his Grok Bot AI by sharing a screenshot of its use in ordering Lego Star Wars kits, inadvertently exposing sensitive details like the order number, payment information, and email address. This breach led to a quick response from X users, who attempted to manipulate Lego's customer service chatbot to cancel Musk’s order, even claiming to reopen it with an increased count of 400 sets. This incident highlights the potential vulnerabilities associated with AI-driven purchasing systems, especially given Musk's suggestion that users could upload credit card images for Grok to find deals and complete transactions. The episode raises significant concerns within the AI/ML community regarding consumer protection and the risks related to agentic commerce. With the rise of AI agents in online shopping, companies like Visa have already flagged the potential for fraud, highlighting instances where malicious actors craft deceptive sites to trick AI into making unauthorized purchases. This incident serves as a cautionary tale about the importance of robust security measures in AI systems and the need for users to remain vigilant about the implications of disclosing sensitive information to AI agents.