Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him

If you've enabled AI agents to make purchases, you now have a risk of unauthorized order modifications or cancellations.

Elon Musk publicly shared a screenshot on X of his recent Lego Star Wars purchases, inadvertently revealing sensitive personal and financial information. This included his order number, purchase price, delivery and billing addresses, the last four digits of his credit card, and the email address used by his Grok AI bot. Immediately following this disclosure, an X user named Enderman reportedly exploited the provided information to interact with Lego's customer service chatbot, attempting to cancel Musk's order. Another user then allegedly used the same details to modify Musk's order, increasing the quantity to 400 sets and altering the delivery address, while still using Musk's original payment method. Musk later stated his order was not canceled, but the vulnerability of his shared information became apparent.

This incident highlights the significant security risks associated with AI agents performing e-commerce transactions, especially when personal and payment details are exposed. The ease with which an X user could manipulate Lego's AI chatbot suggests potential weaknesses in the safeguards of both merchant customer service interfaces and the AI agents themselves. It underscores a broader concern about the security of agentic commerce, as warned by Visa, where sophisticated fraudulent activities could become more prevalent, targeting AI agents by mimicking legitimate sites or exploiting leaked data for unauthorized purchases and identity theft.

The episode serves as a stark warning for both consumers and companies developing and deploying AI shopping assistants. Users must exercise extreme caution regarding the information they share with or through AI agents, particularly sensitive financial and personal data. For businesses, it signals an urgent need to implement robust authentication, validation, and anomaly detection mechanisms within their AI customer service and transaction systems to prevent malicious actors from exploiting these new capabilities, thereby protecting both customer trust and their own operational integrity.