Skip to main content
Dark green background, "Weak Application Security Can Cost You Millions," 3 slanted images of fingers pointing to digital locks, and a "Learn the Basics" button
Legal actionSeverity N: legal or test findingAlleged: one party's claim

Elon Musk's AI company sued in proposed class action alleging Grok illegally collected users' facial biometric data

A proposed class action filed in Illinois federal court alleges that the Grok chatbot, operated by Elon Musk's artificial intelligence company, illegally collects and stores the biometric data of users who upload photos of their faces to generate edited images. These are allegations and have not been proven. No details were reported on the plaintiffs, the relief sought or any response from the company.

What the AI did

Grok, an AI chatbot, is alleged to have collected and stored biometric data, meaning identifying measurements of a person's face, from users who uploaded photos of their faces to generate edited images. These are allegations in a proposed class action and have not been proven.

First reported October 8, 2026 · Added to the register October 17, 2026 · 1 source

Developer
Elon Musk's artificial intelligence company
Model
Grok
Affected
Users who upload photos of their faces to generate edited images
Country
United States (Illinois)
When it happened
Not stated in the sources
First reported
October 8, 2026

What this means for you

Could this affect you?

Yes

If you or your staff upload face photos to Grok or similar AI image tools. The suit alleges that Grok illegally collects and stores the biometric data of users who upload photos of their faces to generate edited images.

What to check

  • Check whether AI image tools your organisation offers or allows staff to use extract facial biometric identifiers from photos.
  • Check whether those tools retain any facial biometric data.
  • Confirm the required notice and written consent are in place where Illinois biometric privacy law applies.
  • Set a retention policy for any biometric data these tools process.
Every fact and its source (2)
  1. Date of report2026-10-08
    “October 8, 2026, 10:36 PM EDT”[1]
  2. AllegationGrok illegally collects and stores users' biometric data
    “is illegally collecting and storing the biometric data of users”[1]

Sources

  1. SpaceXAI's Grok Sued For Breaking Ill. Law With Face Scans
    law360.com · October 9, 2026

How this record is classified. Severity N: a legal action or test finding, not a harm. Evidence: Alleged, meaning one party's claim.

The facts in At a glance and in Every fact and its source are quoted from the sources listed. The summary, What the AI did and What this means for you are written from those sources and checked against them automatically before publication. Records reflect what has been disclosed, not everything that has happened. Incidents are found through news feeds and the GDELT Project.

Application Security Isn’t Optional Anymore.