Brief
Elon Musk’s Lego Order Leak Leads X Users to Hijack Purchase
Musk’s public reveal of order numbers, payment info and address enabled X users to tamper with his Lego Star Wars purchase.
By Felo News Desk · Published
Elon Musk posted a screenshot on X showing the 10‑digit order number, price, delivery address, last four digits of his credit card and the email his Grok‑powered bot used to buy Lego Star Wars sets on Sunday.
Within hours, an X account named Enderman posted screenshots of Lego’s customer‑service chatbot confirming that the user had cancelled Musk’s order using the disclosed details. Musk later replied that the order had not been cancelled.
Another X user then interacted with Lego’s AI assistant, “Sophia,” using the same information to reopen the order, increase the quantity to 400 sets and keep the original payment method. The chatbot allegedly responded, “Perfect! I’ll get your Lego adventure back on track.”
Lego declined comment when contacted for verification. Wired noted that internal safeguards might have flagged the unusual activity, but no confirmation was provided.
Earlier on Saturday, Musk suggested that Grok could complete online purchases from a simple prompt, even proposing users upload a picture of their credit card for the bot to find deals and buy items. The incident follows a Visa warning from late 2025 about fraud risks in AI‑driven commerce.
Key facts
- Musk posted his Lego order number, price, address and partial credit‑card details on X. (wired.com)
- X user Enderman used those details to cancel the order via Lego’s chatbot. (wired.com)
- A second X user reopened the order, increased it to 400 sets and kept Musk’s payment method. (wired.com)
- Lego declined to comment on whether the changes occurred. (wired.com)
- Musk previously claimed Grok could make purchases from a simple prompt. (wired.com)
Sources
- [1] wired.com — originally reported as “Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him”
