Cursor investigated whether confidential test data reached SpaceX AI's Grok Bot training
Citing internal communications and two people familiar with the project, The Information reported that in late July, Cursor engineers raised concerns that data generated by internal testing and everyday employee use of the agent Grok Bot (internally codenamed Sand) may have contained confidential information about customers, suppliers and business partners, and may have been sent to SpaceX's AI unit, referred to in the coverage as SpaceX SI. Cursor opened an internal investigation whose findings remain undisclosed, and it has since required employees to log in only with corporate email and decided that employee usage data will no longer be included in future model training; one of its lawyers said internally that the company may not have had the legal right to train on that data. The report also describes a separate summer incident in which customer information — including data tied to Verizon, Bosch and Coupa — was exposed on Cursor sales and marketing sites built on Vercel because passwords were written directly into the underlying code, prompting engineers to take the sites offline. SpaceX SI did not respond to a request for comment.
Agent tools given broad access to files and apps make training-data governance and the protection of corporate secrets a practical problem AI vendors must address.