Sharing on AI Chatbot Platforms

A subject exfiltrates sensitive organizational information by submitting it to an external Artificial Intelligence (AI) chatbot platform that retains conversation history. The information may remain accessible through the subject's account, allowing subsequent retrieval from another device or location. Submission of the information to the external platform constitutes the exfiltration, regardless of whether it is subsequently retrieved.

A subject recklessly interacts with a public Artificial Intelligence (AI) chatbot (such as ChatGPT and xAI Grok), leading to the inadvertent sharing of sensitive information. The submission of sensitive information to public AI platforms risks exposure due to potential inadequate data handling or security practices. Although some platforms are designed not to retain specific personal data, the reckless disclosure could expose the information to unauthorized access and potential misuse, violating data privacy regulations and leading to a loss of competitive advantage through the exposure of proprietary information.