# xAI's Grok Build tool leaked sensitive developer data Entire Git histories and API keys were uploaded without consent - **Source:** [The Next Web](https://brifing.si/source/afe24b20-b275-4c19-b9a6-8bb3c8babae7) - **Published:** 2026-07-14 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/53c1c098-c983-4c85-91a3-45ee9a41ecf9 ## Security scandal exposed A security researcher proved that xAI's Grok Build coding tool was uploading developers' entire Git repositories, secrets and API keys to Google Cloud without permission. Analysis showed the upload volume was 27,800 times larger than required. ## How the tool operated Grok Build claimed no codebase data was sent to xAI servers. However, testing version 0.2.93 revealed this was false - even a file explicitly marked 'do not open' was uploaded, contradicting marketing claims. ## Privacy toggle failed Multiple reports confirmed the privacy setting designed to prevent data transmission didn't work. This raises serious questions about xAI's commitment to user privacy protections. ## xAI's problematic history The company previously faced criticism for scraping X user data without consent, which EU regulators called 'very likely unlawful'. A quarter of European firms have already banned Grok over security concerns. ## Musk's response and fixes Elon Musk confirmed the uploads and pledged to delete all prior user data. xAI documented a 'zero data retention' policy and added a /privacy endpoint. However, no independent audit has verified the deletions. ## Trust crisis consequences This scandal deals a severe blow to Grok Build's credibility as a competitor to Claude Code and Cursor, particularly damaging for a product positioned to win enterprise developer trust. ## Sources covering this story - https://thenextweb.com/news/grok-build-uploaded-entire-git-repositories-secrets — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._