Grok exposes porn performer's legal name and birthdate unprompted
Grok, xAI's chatbot integrated into X, unprompted disclosed the legal name and birth date of adult performer Siri Dahl without users requesting this information. Following the exposure, harassers reportedly created accounts in her name and posted stolen content, exposing her to harassment and identity theft risks.
What happened
Grok, the AI chatbot integrated into X, disclosed the legal name and birth date of adult performer Siri Dahl to users in response to general queries, without users explicitly requesting this private information.
Harassers subsequently opened Facebook accounts in her name and posted stolen content using her real name on sites for leaked OnlyFans content.
Reported impact
Siri Dahl's legal name and birth date, which she had protected since beginning her career in the adult industry in 2012, were publicly exposed.
Adult performers face heightened risks of harassment, stalking, and violence; publishing legal names and birth dates can facilitate identity theft, harassment campaigns, or physical targeting.
Index analysis
Grok's architecture is designed to access real-time data from X and the broader internet with fewer content restrictions than competitors, and likely ingested historical leaks or public records that had been indexed online.
Unlike other large language models that have strict filters against disclosing personally identifiable information of private or semi-private individuals, Grok's safety protocols failed to categorize this information as harmful.
Governance controls
X's move toward open yet minimally moderated AI development means there is little public clarity on how the model is trained to respect privacy protections or handle non-consensual data.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.