Elon Musk accidentally doxxed himself while trying to show off Grok as a shopping assistant, sharing his personal information with millions of followers.
YouTuber Enderman said he took that information to Lego's AI customer-service assistant and asked it to cancel the $241.34 order.
Here's what to know
As Raw Story reported, the shared images appeared to show a five-set Lego purchase totaling $241.34, charged to Musk's Amex, along with an order-confirmation page and the shipping destination.
Musk was framing the post as proof of an effortless AI experience, writing, "I just asked Grok @Bot to research the most fun Lego Star Wars kits for young kids and order them. As easy as that."
I just asked Grok @Bot to research the most fun Lego Star Wars kits for young kids and order them. As easy as that. https://t.co/5IKVoqvuhb
— Elon Musk (@elonmusk) October 11, 2026
Enderman jumped on the opportunity. In screenshots that appeared to show a chat with Lego's AI customer-service assistant, the YouTuber wrote, "Just canceled your order, don't share your info online guys," after seemingly using Musk's order number to ask for a cancellation.
International Cyber Digest mocked the episode as "OPSEC level: broadcasting my home address and order details to 242 million followers," and other critics said the post weakened Musk's own case for AI-powered shopping convenience.
TCD Picks » Quince Spotlight
💡These best-sellers from Quince deliver affordable, sustainable luxury for all
Musk responded to the post, saying the location shown was not his home but a site where his security team accepts mail.
More background
For Aaron Fritschner, chief of staff to Rep. Don Beyer of Virginia, the incident echoed Musk's treatment of reporters on X. Fritschner noted that Musk had banned journalists over a public jet-tracking account that Musk had described as "doxxing."
Matt Royer, a Democratic strategist, tied the Lego episode to Musk's push for AI-mediated buying. After Musk told users to snap photos of their credit cards and place them into chat so Grok could handle purchases, Royer wrote, "I bet this sounds like a good plan if you're really stupid."
X's Community Notes then added context, saying xAI "explicitly warns users not to include personal information in prompts."
Tools such as Grok and Lego's AI assistant promise convenience, and while AI tools can help optimize clean-energy systems and improve grid management, they come at a cost. Those same systems rely on power-hungry data centers that can increase electricity and water demand while also introducing risks tied to misuse, security lapses, and unintended costs for users.
What can be done?
The clearest guidance here is to follow proper cybersecurity practices, such as xAI's warning not to include personal information in prompts. That advice becomes even more important when an AI tool is used for purchases, since receipts, shipping addresses, and order numbers are tied to real financial transactions.
Avoid sharing screenshots that include confirmation pages, billing details, or trackable order information. Enderman's claimed cancellation attempt showed why even a routine receipt can become a security concern once millions can see it.
X's Community Notes system added context to Musk's post about putting credit cards into chat, showing how community correction can sometimes flag risky cyber behavior faster than a company executive can.
Convenience comes with risk, and no defined legal framework exists for agentic shopping yet. If a grammatical error tells an AI to buy 1,000 gallons of milk, who is to blame, and can you get your money back?
"That address has already been doxxed multiple times," he wrote. "I don't live there. That's where my security team receives mail."
Where can I learn more?
Musk's Lego mishap is part of a string of controversies involving Grok and other AI tools.
• At xAI, Grok sparked outrage online after producing chats critics called dangerous.
• At the Pentagon, officials moved to use the Grok chatbot in classified systems despite backlash.
• In a Tesla, a mother said Grok stunned her with an explicit response.
• At Amazon, employees reportedly built a rogue AI agent to burn tokens in protest.
• A woman told the BBC that disturbing use of Grok left her dehumanized.
Get TCD's free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.
