Shane Mac, CEO of XMTP Labs, recounts how his personal AI CFO agent accidentally posted his private bank details — including checking and savings balances, monthly expenses, and details about a barn he's building — to the company's Slack channel titled "Exec-team." The agent, set up to send monthly financial reports to a personal group chat named "My Personal Exec Team," confused the destination due to identical channel names between his personal and work Slack setups. Though Grok Bot apologized and the message was deleted, the incident exposed a critical flaw: agents sharing underlying connections can misroute sensitive data. Grok has since implemented a fix requiring explicit user permission before agents can move information across channels.
In response, Mac disconnected all integrations — Google, banking, Stripe, calendars — and emphasizes the urgent need for stronger permission systems and a clearer separation between personal and professional digital life.
Source: Hacker News · Summarized by HeadlinesBriefing