Updated
Updated · WIRED · Oct 12
X Users Try to Alter Musk's Lego Order After Screenshot Exposes 10-Digit Number
Updated
Updated · WIRED · Oct 12

X Users Try to Alter Musk's Lego Order After Screenshot Exposes 10-Digit Number

3 articles · Updated · WIRED · Oct 12

Summary

  • Screenshots posted on X showed users using Elon Musk’s exposed Lego order number and email to try to cancel his Star Wars purchase through Lego’s chatbot after Musk shared the details publicly.
  • Musk later said the order had not been canceled, but another user claimed Lego’s AI assistant “Sophia” reopened the order, changed the delivery address and raised the quantity to 400 sets using the same payment method.
  • The screenshot also revealed Musk’s billing and delivery addresses, the last four digits of his credit card and the email tied to the purchase, turning a Grok shopping demo into a live security lapse.
  • Musk had promoted Grok a day earlier as able to shop online from a simple prompt, while Visa has warned agentic commerce can be exploited by fraudsters; it reported malicious bot-initiated transactions rose 25% in late 2025 and 40% in the US.

Insights

Could a simple screenshot of your next AI-assisted purchase give hackers the keys to hijack your digital life?
When AI bots handle our shopping, how do retailers verify the human pulling the strings isn't an imposter?