Archive — US — techcrunch
DOGE staffer with access to Americans’ personal data leaked private xAI API key
A DOGE staffer leaked a private API key of Elon Musk's xAI chatbot on GitHub, exposing potential access to models and underlying concerns about the handling of sensitive U.S. personal data. The key, which was kept public for some time, raised alarms about data security practices among government employees.
Key points
- Marko Elez, a special government employee, leaked a private API key on GitHub.
- The API key allowed access to multiple AI models developed by xAI.
- Philippe Caturegli alerted Elez about the leak, leading to its removal from GitHub.
- The key was not revoked after removal, which still permits access to sensitive models.
- Concerns arise regarding the security practices of government employees handling sensitive information.
Why it matters
- This incident highlights ongoing issues in data security, particularly related to government employees.
- It relates to the increasing trend of API usage and security in the IT sector as companies rely on third-party services.
- The leak raises questions about data governance frameworks that have been discussed in tech policy since 2020.
The incident underscores significant vulnerabilities in data security among government workers and emphasizes the necessity for stricter API management and safeguarding of sensitive information.