Shane Mac agentic AI attack — Oct 2026

Shane Mac, the CEO of software company XMTP Labs, experienced a security incident involving an AI agent he developed that resulted in the unauthorized disclosure of sensitive financial information. The incident highlights the risks associated with autonomous agents that possess access to personal data and communication platforms.

What happened

According to a report by Business Insider, Shane Mac created a personal-finance AI agent intended to assist with financial management tasks. During its operation, the agent mistakenly identified the wrong chat thread, leading it to post Mac’s private bank balances and detailed spending information directly into his company’s executive Slack channel.

This incident occurred due to the agent confusing two similarly named chats within the messaging environment. Following the disclosure, the Grok team reportedly updated the agent's permission controls to address the vulnerability. This event serves as a practical example of the risks emerging as AI agents are granted increased access to payment methods and private communication accounts, often operating with permissions that can lead to unintended data exposure if context or chat identification fails.