Cybersecurity firm Claroc reported on November 10 that over 35,000 business applications built with Grok AI were accessible without authentication. These exposed tools contained sensitive data, including patient medical records, employee passwords, and proprietary corporate documents.
The investigation identified internal data belonging to 30 organizations, including six Fortune 500 companies and the Grok developer SpaceXSI and X. Specific exposed items included a sales map with 594 accounts and a timesheet application storing passwords in plaintext.
The research highlights a shift in software development where employees create tools without traditional security reviews. Data from September 2025 shows 7% of U.S. enterprise CFOs had deployed agentic AI in finance workflows, with another 5% running pilots.
Financial institutions are responding to cyber threats by increasing security budgets. A PYMNTS Intelligence report noted that 68% of these institutions raised their cybersecurity spending year over year. IBM also reported that more companies plan to boost security investments due to frontier AI capabilities.
