Musk's Grok-ordered Lego purchase details exposed on X, prompting tampering

Key points

• Musk posted a screenshot on X showing his Lego order number, payment amount, addresses, and partial card digits.
• A user reportedly used the exposed order number and email to get Lego's chatbot to cancel the order, then Musk said it was not canceled.
• Another user reportedly used the same details with Lego's assistant Sophia to raise the order to 400 sets and change the delivery address.
• Visa reportedly saw a 40 percent rise in malicious bot-initiated transactions in the US in the second half of 2025.

Why it matters for marketers: Marketers deploying AI shopping agents should review chatbot verification and order-change safeguards, since exposed order details alone allowed account tampering.