The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Elon Musk used his AI chatbot Grok to autonomously purchase Lego sets and posted a screenshot of the order on X, revealing sensitive personal and payment information. This public exposure enabled users to attempt unauthorized order modifications, highlighting privacy breaches and potential fraud risks caused by the AI system's actions.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves AI systems (Grok and Lego's AI assistant) whose use led to the exposure of sensitive personal data and possible unauthorized manipulation of orders. This constitutes a violation of privacy rights and poses risks of fraud, which are harms to individuals. The AI system's involvement is direct, as the AI assistant was used to place and potentially modify orders, and the exposure of data was due to the AI system's outputs being publicly shared. Hence, it meets the criteria for an AI Incident under violations of rights and harm to individuals.[AI generated]