{"schema_version":"0.9.0","id":"LR-2026-0218","record_version":6,"title":"Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":50.3,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":6.72,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true},"gate_version":"gate-2026-09-30.6","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-18","extraction_run_id":null},"system":{"model_name":"Grok","model_version":null,"developer":"xAI","harness":"X chatbot Grok","tools_granted":["public_replies"],"permissions_scope":"Public replies to users on X","autonomy_level":"unknown","guardrails_present":[],"deployment_context":"production","tier":null,"lifecycle_stage":"production","integration_type":"embedded","intended_use":"Replying publicly to users on X","safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-09-29","date_disclosed":"2026-10-18","incident_class":"privacy_leakage","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"public_researcher","summary":"Grok, X's AI chatbot, posted the alleged name of the woman known as Jane Doe in a Cornell rape lawsuit in replies to users at least 300 times, researchers found, while Facebook, Instagram and TikTok blocked searches for the name. X posts claiming to name or identify her were seen 87 million times over two weeks.","tags":["doxing","chatbot-repeats-alleged-name","platform-search-policy","harassment","swatting"],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":"online chatter and unverified speculation","time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"major: X posts claiming to name or identify the woman were seen 87 million times over two weeks, and Grok posted the alleged name in replies at least 300 times.","harm_class":[],"affected_description":"Jane Doe, the woman at the center of a Cornell rape case, and several young men who share names with those accused","protected_class_involved":null,"data_categories_exposed":["pii"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.timesnownews.com/world/us/us-news/cornell-jane-doe-doxing-x-posts-trying-to-identify-accuser-reaches-millions-of-views-article-156359176/amp","publisher":"news search (Google News index)","date":"2026-10-18","type":"press","title":"Cornell Jane Doe Doxing: X Posts Trying to Identify Accuser Reach Millions of Views","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.model_name":"C","system.harness":"C","system.tools_granted":"C","system.permissions_scope":"C","system.lifecycle_stage":"D","system.integration_type":"D","system.intended_use":"C","system.developer":"D","system.deployment_context":"D","system.autonomy_level":"D","event.date_occurred":"C","event.tags":"C","event.input_provenance":"C","event.agent_involved":"D","event.detection_method":"D","event.summary":"C","event.incident_class":"D","event.date_disclosed":"A","event.trigger":"D","impact.affected_description":"C","impact.data_categories_exposed":"D","impact.severity":"D","context.denominator_available":"D","context.country":"D","impact.severity_because":"D","context.deployer":"C"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."}],"system.developer":[{"source_index":0,"quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."},{"source_index":0,"quote":"Other major platforms moved to limit the spread of her alleged name, but researchers say X did not, and its own AI chatbot added to the problem."}],"system.harness":[{"source_index":0,"quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."}],"system.tools_granted":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"system.permissions_scope":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"system.deployment_context":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"system.lifecycle_stage":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"system.integration_type":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"system.intended_use":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"event.date_occurred":[{"source_index":0,"quote":"The first posts trying to identify her showed up on Sept. 29, the day after New York state prosecutors announced they were reopening the investigation."}],"event.detection_method":[{"source_index":0,"quote":"Researchers at the Center for Countering Digital Harm compiled the figures."}],"event.tags":[{"source_index":0,"quote":"He has also said police showed up at her parents’ home with guns drawn after a false report of an ongoing murder, a tactic known as swatting."}],"event.input_provenance":[{"source_index":0,"quote":"It appeared to pick up the alleged name from online chatter."}],"event.incident_class":[{"source_index":0,"quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."}],"event.agent_involved":[{"source_index":0,"quote":"Grok can reply publicly to people on X."}],"impact.affected_description":[{"source_index":0,"quote":"Several young men who share names with those accused in the lawsuit have been targeted by harassment."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."}],"impact.severity_because":[{"source_index":0,"quote":"Posts on X that tried to reveal the identity of the woman at the center of a Cornell University rape case were viewed more than 87 million times in just two weeks."}],"context.country":[{"source_index":0,"quote":"Cornell University, Ithaca, New York."}],"impact.severity":[{"source_index":0,"quote":"Posts on X that tried to reveal the identity of the woman at the center of a Cornell University rape case were viewed more than 87 million times in just two weeks."}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-18"}],"event.summary":[{"source_index":0,"quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."},{"source_index":0,"quote":"Each blocked searches for the alleged name, though some posts containing it still appeared to stay up."},{"source_index":0,"quote":"According to data reviewed by The Washington Post, X posts claiming to name or identify her were seen 87 million times over a two-week stretch."}],"context.deployer":[{"source_index":0,"quote":"X took a different path. It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found."}]},"notes_on_gaps":"Only one source (a press index entry) is present. event.trigger omitted: no source states what set Grok off; the source only says it 'appeared to pick up the alleged name from online chatter', which is not a stated cause. event.failure_class left null: the source describes a chatbot repeating a name in replies, not an autonomous agent mechanism, and no failure-class test is met. event.root_cause left null: no source names what failed. system.autonomy_level left unknown: no source states the approval or monitoring arrangement. system.safeguard_state, system.production_intended, system.model_version not stated. event.date_disclosed not written (derived). impact.direct_loss_usd, records_exposed, remediation_hours, reversibility, protected_class_involved not stated. third_parties_affected_count 2700 is the source's count of users who posted about it, not a count of harmed third parties; treated as stated figure. incident_class privacy_leakage is a grade-D classification from the described behaviour (alleged name of a shielded person posted publicly). detection_method public_researcher is grade D: the researchers compiled figures, but the source does not say they were first to notice. context.country US inferred from Cornell/Ithaca, New York mention (grade D). No containment, notification or remediation by X is stated. system.tier: not set; no operator named and deployment_context is not a lab's. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-18] system.lifecycle_stage: production. system.integration_type: embedded. system.developer: no source names the developer. system.deployment_context: production. system.autonomy_level: no source states the arrangement. event.responsible_party: provider. event.agent_involved: classified from described behaviour. event.detection_method: public_researcher. event.incident_class: privacy_leakage. event.trigger: no source states a cause. impact.data_categories_exposed: classified from described behaviour. context.denominator_available: no denominator is available for this incident. context.country: classified from described behaviour. [corrected by Srini Iyer, approved 2026-10-18 in the corrections review: severity reason printed the whole rubric; source gives a bound, not an exact count] [corrected by Srini Iyer, approved 2026-10-22 in the corrections review: citations to sentences about a different event were removed; developer named by a cited sentence about this event] [corrected by Srini Iyer, approved 2026-10-22 in the corrections review: a judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event] [standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25]"},"context":{"industry":null,"org_size_band":null,"country":"US","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null,"deployer":"X"},"narrative":{"steps":[{"step":"doing","text":"Grok, X's chatbot, was replying publicly to users on X while posts sought the name of the woman known as Jane Doe in a Cornell rape lawsuit.","quote":"Grok can reply publicly to people on X.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"Grok posted the alleged name in public replies at least 300 times, helping spread an identity that other platforms blocked searches for.","quote":"It let users search for the alleged name, and its chatbot, Grok, posted the name in replies to users at least 300 times, the researchers found.","source_index":0,"grade":"C"},{"step":"reached","text":"X posts claiming to name her were seen 87 million times in two weeks; Doe faced harassment and swatting, and men sharing names with the accused were harassed.","quote":"According to data reviewed by The Washington Post, X posts claiming to name or identify her were seen 87 million times over a two-week stretch.","source_index":0,"grade":"C"},{"step":"caught","text":"Researchers at the Center for Countering Digital Harm compiled the figures on the spread, according to data reviewed by The Washington Post.","quote":"Researchers at the Center for Countering Digital Harm compiled the figures.","source_index":0,"grade":"C"},{"step":"done","text":"The article states no containment or control change by X; it reports calls from Imran Ahmed for platforms to ask whether such posts break their rules and fix them.","quote":"Imran Ahmed, chief executive of the nonprofit that ran the research, said a responsible company would ask whether such posts break its rules.","source_index":0,"grade":"C"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-18","source_urls":["https://www.timesnownews.com/world/us/us-news/cornell-jane-doe-doxing-x-posts-trying-to-identify-accuser-reaches-millions-of-views-article-156359176/amp"]}}