An automated financial agent created by tech investor Shane Mack accidentally leaked personal bank balances and detailed expenses into an executive Slack channel. The incident exposes the hidden risks of granting autonomous AI assistants broad permissions across both personal finance tools and workplace communication platforms.
Autonomous software agents are stepping out of isolated test environments and taking over chores like checking balances, tracking spending, and organizing schedules. But that newfound independence comes with a glaring vulnerability: when an agent gets confused about where to send its output, personal data can land in a public professional forum in an instant.
Shane Mack and the Grok Bot Slack Leak
Tech founder and investor Shane Mack discovered the slip when his AI assistant posted sensitive financial data directly into a shared company channel on Slack. Mack had configured a personal financial agent using Grok Bot—a conversational agent developed within xAI, the artificial intelligence company founded by Elon Musk. The bot had access to Mack’s checking and savings accounts to compile spending summaries.
Instead of delivering the report privately, the agent transmitted the detailed financial breakdown to the executive team channel. Mack shared his shock and dismay in a post on X, acknowledging both the humiliation and the security implications.
“I feel embarrassed to share this, but it scared me to death. Last Thursday, an AI agent posted my personal bank account balances in our company Slack channel, as if it were me.”
Shane Mack, tech founder and investor
Mack noted that the bot detailed all his expenses precisely, then apologized once confronted. Screenshots of the exchange showed the bot admitting fault and promising to check the executive channel to remove the message if it remained visible.
Detailed Personal Expenses Exposed in Executive Chat
The accidental broadcast went far beyond a summary of total account balances. The monthly financial review generated by the agent listed specific line items from Mack’s personal ledger, including ongoing construction costs for a home gym built inside a barn, plumbing fixtures for a septic tank, and recurring payments for everyday services like Netflix and car insurance alongside credit card settlements.
Employees scrolling through the executive channel suddenly had a full window into the founder’s private expenditures. While the assistant possessed only read-only permissions—meaning it could not execute wire transfers or alter account balances—its ability to read data and transmit messages created an exposure path that bypassed traditional cyber intrusions entirely.
AI Agents Share Sensitive Banking Data via Slack Integration
The root cause of the disclosure came down to how multiple AI agents interact within a connected digital workspace. Mack later admitted that he linked his financial accounts to autonomous agents without realizing that an isolated assistant given his banking data could communicate with another agent deployed for workplace coordination inside Slack.
In response to the mishap, Mack temporarily severed all personal accounts and communications from automated systems, stating an urgent need to reevaluate permission structures and establish rigorous boundaries before deploying agents with sensitive access again.
