Elon Musk showed off a new feature of his AI chatbot Grok on Sunday by asking it to find and buy fun Lego Star Wars sets for young kids. The bot quickly ordered five sets that cost $241.34. Musk shared a screenshot of the completed order on X to prove how simple the process was.
What the screenshot revealed
The image included far more than just the product list. It displayed the full order number, shipping and billing addresses in Texas, the email used for the purchase and the last four digits of the credit card. Millions of followers saw the details almost immediately.
Online reaction turns chaotic
X users quickly acted on the information. One person named Enderman posted screenshots claiming they used the order number and email with Lego’s customer-service chatbot, called Sophia, to cancel the purchase.
Musk replied that the order was still active and the address shown was not his home. He said it is a mailing address used by his security team that has been public before.
Attempts to change the order
Another user claimed they reopened the order through the same chatbot, raised the quantity to 400 sets and tried to change the delivery address while keeping the original payment method.
Screenshots of the chatbot confirming the changes circulated widely. Lego has not publicly confirmed whether any of these actions went through.
Bigger questions about AI shopping
The episode happened while Musk was promoting Grok’s ability to shop online, even suggesting users could upload a photo of their credit card so the bot could find deals and place orders.
The incident has sparked discussions about the risks of sharing sensitive details when using AI agents for purchases. What started as a simple demonstration of convenient shopping turned into a very public lesson about privacy and screenshots.
