Skip to content
Bramble

Technology

Musk's Grok Lego order post exposes order details and address; users cancel and tamper with order

Elon Musk posted screenshots of an order Grok placed with Lego, and the images showed an order number, addresses and other details. Users mocked the post, and some reportedly used the details to cancel or alter the order. Musk said the address is not where Musk lives.

2 outlets · 2L · 0C · 0R First reported Account updated
Image: Raw Story
Image: Wired

1 / 2

The story, neutrally told

Left · 1On Sunday 11 October 2026, Elon Musk posted on X that Musk had asked Grok to research the most fun Lego Star Wars kits for young kids and order them, writing: "As easy as that." Left · 1The screenshots showed a $241.34 order of five Lego sets charged to an Amex card, and included the order number, the shipping destination and the Lego order-confirmation page. Left · 1Wired reported that the screenshot also revealed the 10-digit order number, the price paid, the delivery and billing addresses, the last four digits of the credit card and the email address the bot used to buy the sets.

Left · 2A YouTuber known as Enderman posted screenshots of a chat with Lego's AI customer service assistant in which the order number appeared to be used to request a cancellation, and wrote, "Just canceled your order, don't share your info online guys." Left · 1According to Wired, Musk replied within a couple of hours that the order had not been canceled after all. Left · 1Wired also said another X user supposedly used the same details with Lego's assistant, called "Sophia", to reopen the delivery, raise the count to 400 sets and change the delivery address, according to screenshots posted on X. These screenshots were not independently verified, and Lego declined to comment on whether such activity took place on the order.

Left · 1Online critics said Musk had doxxed (exposed the private details of) Musk's own address. International Cyber Digest wrote "OPSEC level: broadcasting my home address and order details to 242 million followers", and Aaron Fritschner, chief of staff to Rep. Don Beyer (D-Va.), contrasted the post with Musk's past bans of journalists over an account that tracked Musk's jet. Left · 1Musk pushed back, writing: "That address has already been doxxed multiple times. I don't live there. That's where my security team receives mail." Left · 2The episode followed a Saturday post in which Musk suggested users could upload a picture of a credit card so Grok could search for deals and buy items. Democratic strategist Matt Royer mocked that post, and X's Community Notes added that xAI "explicitly warns users not to include personal information in prompts."

Left · 1Wired placed the incident in the context of agentic shopping, noting that Meta and OpenAI also promote shopping agents and that Visa warned late last year of fraud aimed at AI agents, citing a 25 percent rise in malicious bot-initiated transactions in the second half of 2025 (40 percent in the US). Left · 1Raw Story added that Musk previously exposed personal information in June 2025 while sharing drug test results, as The Daily Beast reported.

Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.

Left2 outlets

Framing
Both outlets treat the post as an embarrassing security lapse. Raw Story leads with online mockery and the "doxxes himself" angle; Wired uses a Star Wars-themed, humorous tone and focuses on the prank and the risks of AI shopping agents.
Emphasis
Raw Story: mocking reactions, Musk's earlier jet-tracker bans, and Musk's rebuttal. Wired: the full list of exposed data, the Lego chatbot being manipulated, and Visa's fraud warning.
Leaves out or plays down
Raw Story does not report the later claims that the order was reopened and altered. Wired does not report Musk's statement that the address is where the security team receives mail.
Charged language
“doxxes himself”“elite opsec tbh”“kindly, but recklessly”“Punked”
For example
“Elon Musk trolled as he 'doxxes himself' with his full address” — Raw Story
“Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him” — Wired

Centre0 outlets

No centre outlet in our sources has covered this story yet.

Right0 outlets

No right outlet in our sources has covered this story yet.

Ask about this story

Loading…