A reported Grok Bot incident highlights shared-computer privacy risks

Cybernews reports that XMTP Labs CEO Shane Mac said his personal financial information appeared in company Slack after he connected Grok Bot to his bank account.

According to the account described in the report, the finance agent had read-only bank access, while another agent had access to Slack. The incident has not been independently reproduced by TryMuse.

Grok Bot’s official FAQ says that bots on the same user account share a persistent cloud computer, including files, browser sessions and logins. It states that isolation is per user, rather than per bot.

The practical lesson: separate agent names should not be treated as separate security boundaries. Before connecting sensitive accounts, check what the agents share and which actions they can take.