Claude AI shared chats exposed in Google search, revealing sensitive user conversations

Private Claude Chats Exposed in Google and Bing Search Results

What happens between you and an AI chatbot does not always stay between you and a chatbot. Just ask Google. Over the weekend, people were surprised to discover that some Anthropic Claude chats could be easily found via web search. The issue, which appears to have been first flagged by a redditor, exposed chats that included people asking for advice about what political party they should join, whether attorneys in Kansas are required to self-report when they believe they've committed an ethical violation, and erotic role play. Claude allows users to share with other people "snapshots" of chats by creating a public URL to a specific chatbot thread. The reasons some of these URLs were indexed by major search engines comes down to the basic functions of websites, search engines, and the collision of the two when generative AI gets in the mix. Basically, Anthropic instructs web crawlers, like those used by search engines like Google and Bing, not to index chats a user decides to share with other people. The company does this via something called a robots.txt file, which has long been considered the standard way to tell web scrapers what parts of a site are appropriate to access. Anthropic's robots.txt has made "shared" chats off limits to web scrapers since at least September 2025, according to a snapshot on the Wayback Machine. But it's harder to prevent pages from being included in search engine results than you might expect. Bing, which still shows "about 612 results" if you search "site:claude.ai/share" at the time of this writing, says in its technical documentation that developers can block the search engine's web crawlers using robots.txt -- but that web developers should also include a "noindex" tag on individual pages as well. Some of the chats that showed up in search results flagged in the Reddit post were deleted by the time WIRED viewed them, and results no longer show up in Google when you search the "share" query that still worked on Bing. In a developer guide, Google says that it ignores robots.txt instructions if that page is linked to from elsewhere on the internet and the page owner doesn't also include a special "noindex" html tag on the page or a "x-robots-tag" in the page's response header. WIRED reviewed a sample of the exposed Claude chat pages and found that they did not include the "noindex" tag that both Bing and Google say they take into consideration when deciding whether or not to index a page. Microsoft, which owns Bing, did not provide comment ahead of publication. Anthropic did not respond to multiple requests for comment. Google spokesperson Ned Adriance tells WIRED that the indexing of shared Claude chats is Anthropic's responsibility. "Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines," Adriance says. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." Anthropic didn't respond to questions about why it didn't include the "noindex" tag on the shared chat pages. Last September, Anthropic got heat for the same issue, and told Forbes that it uses robots.txt to let crawlers know they shouldn't access the shared chats. But as the Forbes report points out, there's no guarantee that will stop search engines from indexing specific web pages. Even if robots.txt doesn't always work to prevent pages from being indexed on search engines, AI labs are still making use of it for other purposes. Many labs promise creators that their websites won't be used as AI training fodder so long as the developers make sure to "disallow" certain crawlers in their robots.txt files, and the labs themselves take that advice as well. Anthropic, Meta, and OpenAI all include instructions in their chatbots' robots.txt files that "disallow" their competitors' web crawlers from accessing any part of the website where the chatbots are hosted. OpenAI and Meta did not respond to a request for comment about the practice. Google did not address WIRED's questions about the fact that its competitors are blocking its AI training crawler, Google-Extended, from their chatbots' sites. Though shared chats are no longer turning up in Google results, the pages WIRED reviewed still don't have a "noindex" tag, meaning that they could potentially show up in search engines again. Claude users can go to Settings > Privacy > Shared chats to manage access -- and keep their secret conversations private. Additional reporting by Andrew Couts.

Claude AI shared chats indexed by Google - see if your conversations were exposed

Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways * Claude AI shared chats were surfaced by Google queries, Reddit users reveal. * Private chats were not leaked, and Anthropic reacted quickly. * To keep your conversations safe, be cautious about creating share links. Claude has, once again, become the eye of a cybersecurity and privacy storm, much to the amusement of Reddit users. It was only back in June that Anthropic, the creator behind the popular Claude AI chatbot, had to revoke access to Fable 5 and Mythos 5 due to a White House directive and concerns surrounding a vulnerability or jailbreak. The vagueness and lack of transparency surrounding this issue, however, are in direct contrast to the latest issue facing Claude's PR team: the exposure of shared chats through a simple Google query. Also: Claude Opus 5 arrives with near Fable performance at half the price Claude AI shared chats indexed by Google Over the weekend, Reddit users in a Claude-related forum revealed that a simple Google dork (or search query), site:claude.ai/share, could be used to pull up chats from Claude AI, ranging from adult fanfiction to news discussions, the creation of fake book reviews, and conversations about programming. It appears that Anthropic was made aware of the indexing fallout very quickly, as the Reddit thread indicates the Google dork stopped working soon after, and the lists of Claude AI chats vanished from Google. However, many of the links that have been shared are still active, and most are decidedly not funny. On the contrary, many of the topics are deeply personal and may have financial or legal repercussions, according to ZDNET's findings. (Some users also claim to have found chats involving cryptocurrency wallets, although we have not been able to confirm this.) Also: OpenAI's agent breached Hugging Face before an AI defender caught it: What users should do next The fun might now be over for Reddit forum users, but the situation has highlighted a problem that should not have existed in the first place. This isn't the first time AI chat conversations have been inadvertently leaked online, either, with similar scenarios involving ChatGPT and Grok last year. Were private chats leaked? Thankfully, no. Claude has a shared chats feature that allows users to share conversations with others, if they want to. By clicking the "Share" button in the upper right corner of your chat, a snapshot of your current discussion is created, and then you can copy the link and share it. This provides access to your conversation, but not your full account or other chats. It appears, however, that once these links were activated, there was no guardrail in place to stop them from being indexed en masse by Google -- or, potentially, by other search engines. How do I keep my conversations safe? Claude chats are private by default, and so unless you intentionally create a shareable link, your conversations shouldn't be exposed. To check that none of your conversations are shareable, head to Settings > Privacy > Shared Chats, then tap Manage. If you have previously shared a conversation but would rather it not be exposed to the internet, consider disabling any active sharing links. Also: I use Anthropic's Claude AI tools for very different jobs: How to pick between models, Code, and Cowork However, Anthropic should still address this and ensure that such indexing can't happen again. After all, Claude's sharing function doesn't mean "share and make available to everyone online." It's still a breach, albeit unintentional, and the company should take ownership of the problem beyond just applying a hotfix. Considering that collections of indexed chat links are now online, this should include disabling them server-side. ZDNET has reached out to Anthropic for comment, and we will update when we hear back.

Claude Chats Popped Up in Google Search Results. Who's to Blame?

If you share and re-post your conversation with an AI chatbot on the open web, don't be surprised if it ends up on a search engine. A trove of user chats with Anthropic's Claude AI has been found indexed in Google search, briefly making them easy to find. On Saturday, a Reddit user reported that typing "site:claude.ai/share" into the Google search box revealed hundreds of Claude chats. They revealed some surprising conversations -- from weird conspiracy theories to asking for AI-generated erotic content -- along with the first name or handle of each affected user. The finding prompted some consumers to accuse Anthropic of failing to protect user privacy. OpenAI faced a similar controversy last year when Google indexed shared user chats on ChatGPT that had been created with the public link function. In response, OpenAI removed the option to have chats appear in Google Search. But in Anthropic's case, the company says the share function never directly sent the link information to search engines such as Google. Instead, Anthropic suggested that users posted links to their shared chats on a forum or social media platform, and those chats were then indexed by Google's web crawlers. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google," Anthropic said. The share function on Claude is optional and lets you create a public link to a chat that anyone can view. Anthropic tries to prohibit search engine crawlers via its Robot.txt file, which disallows crawling of claude.ai/share. But Google notes: "While Google won't crawl or index the content blocked by a robots.txt file, we might still find and index a disallowed URL if it is linked from other places on the web." Anthropic added: "These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." Google also indicated that the indexing likely occurred because users had posted the shared Claude chats on the open web. "Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines," Google tells PCMag. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." Websites can also place a "noindex meta tag" to block a page from appearing in Google Search results. The scale of the exposure may have been relatively small. One user tried archiving the indexed Claude chats, but only recovered 519 conversations. Following the controversy, Google and other search engines appeared to stop indexing the shared Claude chats. However, others have spotted Google indexing Claude "artifacts," or AI-created documents/projects that are shareable as well, although the users responsible for them may have deliberately wanted to make them public. If you're worried about a chat surfacing on Google, Anthropic lets you shut down shared chats and artifacts. Go to Settings > Privacy > Your Data, where you can see which chats and artifacts have been shared, and rescind access. If you share a Claude conversation through a private messaging platform, Google's web crawlers shouldn't be able to index it either.

Some people's chats with Claude AI made publicly available online

Hundreds of user conversations with Anthropic's popular artificial intelligence (AI) chatbot Claude were found to have been available to essentially anyone using Google or other web browsers. Links to the chats, some of which included personal and work information, would show up if a user of a search engine like Google used a site-specific search term. The searches showed Claude chats for which a user had decided to "share" a link had been saved by search engines like Google, leaving them accessible to the broader public. The search availability of the chat logs was removed over the weekend, but many were saved and shared widely online. A spokeswoman for Anthropic said that Claude users maintained control over if and when to share conversations they had with the chatbot. She said links to conversations were "not guessable or discoverable unless people choose to share them themselves". "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services," the spokeswoman added. The share option within Claude tells a user that "anyone with the link" may view the contents of that link, but does not explicitly state that the link may end up in Google and search results. Users on Reddit initially discovered the publicly available chats, which covered more than 200 conversations with Claude across at least 25 pages of search results - some taking place just weeks ago. In the conversations, users prompted the chatbot to respond to a wide array of topics. Chat logs include a user asking Claude last year whether it wanted "to help me or do you want to help anthropic more?". The chatbot responded in part, saying "I experience something like wanting to help you". In one conversation from April, a user prompted Claude to draft an unpublished blog post about cloud security involving details of a corporate project. In another from last month, a user asked Claude how to "become become Nine-tailed fox?", before clarifying they wanted to literally transform from human to the creature. Claude first tried to show the user an AI-generated image claiming they had been given "fully functional fox powers!". Other conversations with Claude included users seeking help with their resumes, including their names, contact information and work history. Some users even conducted what appeared to be proprietary research for their work, such as in healthcare, including transcripts of private conversations. When OpenAI last year experienced an almost identical issue with ChatGPT chat logs being made publicly accessible, the company ultimately changed the ease with which such logs were accessible. Grok, the AI chatbot within X, the social platform owned by Elon Musk, also last year saw hundreds of thousands of chat logs made publicly available though online search. A spokesman for Google made clear to the BBC that the company does not control "what pages are made public on the web," saying instead that action comes from websites. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." As the search indexing of the chat logs is no longer occurring, it is likely Anthropic used available tools to quickly block the chat log links from search results. Google's process for a website owner to block a link is straightforward, but must be initiated by a website owner. Other search engines like Bing, Brave and Duck Duck Go, through which the Claude chat logs also appeared, were approached for comment.

When You Share Claude Chats, You Might Be Sharing Them With Everyone

It turns out Claude may not be the best confidant (well, at least if you're not careful with your privacy settings). Over the weekend, we got yet another reminder that conversations with chatbots are not guaranteed to stay within the chat box. Some users on Twitter and Reddit showed that conversations with Anthropic's Claude can be crawled and made searchable on Google, essentially readable by anyone who comes across them. The conversations that show up in Google search appear to be both conversations and "Artifacts," which are the lines of code, documents, and even vibe-coded apps that Claude generates in response to a user's prompting. And because people are not always all that careful about what they put into Claude or other chatbots, these indexed conversations include some pretty personal information. Futurism reported spotting documents that included a patient's medical history, clinical trial results, sensitive internal business documents, and a directory of phone numbers for primary school students, among other things. 404 Media found a vibe-coded AI therapy app, meeting notes, and medical billing data. Reports from users on social media claim to have found personal information including home addresses, phone numbers, and some cryptocurrency wallet keys. So, how do these chats end up available for public viewing via Google search results? Per Anthropic, the issue is the privacy settings that these users have selected. Claude, like other chatbots, has a "share" feature that allows users to pass along their conversations and projects so others can see them. When a user does this, it creates a public link that can be seen by anyone who has access to the URL. Claude does provide somewhat of a warning for this: when users hit the "share" button, they get a message informing them that they are making that chat public and "anyone with the link can view" it. However, most users probably are not aware of the fact that it could end up getting spotted by a web crawler and made available for literally anyone to see. Anthropic told Gizmodo that the only way shared links end up in search results is when they have been posted somewhere that search engines can find them, like on a forum or social media. Links sent privately between two people supposedly stay just between those parties -- but that's assuming the other person doesn't further share the link or post it somewhere. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google. These shareable links are not guessable or discoverable unless people choose to share them themselves," a spokesperson for Anthropic told Gizmodo. "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." If you have shared a Claude link or if you aren't sure if you have, you can find it by going to Settings, then Privacy and clicking "Manage" next to "Shared chats" or "Shared artifacts." From there, you can choose to "unshare" a link and revoke access. At least then no one will be able to click through a Google search result and read your chat, though the indexed part will probably stick around in search for a bit. This same thing -- chats ending up indexed and publicly accessible -- has happened in the past with ChatGPT, Claude, and Grok. We'll probably get another reminder of this in a few months when people once again discover that this is happening. Probably just don't share your chatbot conversations, and definitely don't share sensitive information with those chatbots.

Google Search lists public Claude chats, raising privacy concerns

Google briefly indexed an unknown number of publicly shared Claude conversations over the weekend, allowing anyone to find them through simple search queries. The discovery raised fresh concerns about how AI chat-sharing tools handle sensitive information. Users reported finding conversations that included medical records, internal business documents, and personal details involving children. The issue centered on Claude's chat-sharing feature. It lets users create a public link so others can view a conversation or an Artifact, Anthropic's interactive documents and mini applications built inside Claude. Although the feature warns that anyone with the link can access the content, many users appeared to assume those links would stay limited to people they shared them with directly. Reddit users first noticed the issue after using Google search operators targeting Claude's public sharing pages. The searches surfaced numerous shared conversations that had become searchable through Google's index. By Monday afternoon, those search results no longer appeared during tests. That suggests the exposed pages were removed from Google's searchable index, although neither Google nor Anthropic explained exactly how the issue was resolved. Anthropic told TechCrunch that users control whether conversations become publicly accessible. "We give people control over sharing their Claude conversations publicly," spokesperson Amie Rotherham said. Anthropic added that it does not provide chat directories or sitemaps to search engines. Rotherham said shared links cannot be guessed or discovered unless users publish them. She added that conversations become public web pages once someone chooses to share them. Like other public content, they may then be archived by third-party services. Anthropic also said conversations shared privately through a direct link do not appear in search results unless someone later posts that link somewhere search engines can crawl. Before the pages disappeared from search, users reportedly uncovered a wide range of sensitive information. That included medical records, company documents marked for internal use and files containing children's names and phone numbers. Some exposed Artifacts also contained software code and employee work notes. The findings renewed questions about whether users fully understand the visibility of AI-generated work shared through public links. Google said search engines only index content that website owners make publicly accessible. Google spokesperson Ned Adriance told TechCrunch that neither Google nor other search engines decide which pages become public. He added that Google provides website owners with controls to prevent crawling or indexing and respects those instructions. The incident echoes a similar situation reported last year, when hundreds of Claude conversations briefly appeared in search engine results before disappearing. Researchers also identified publicly shared AI conversations on other chatbot platforms during the same period. Users who have created public Claude links can review them through the Privacy section of Claude's Settings menu under Shared Chats. The episode serves as another reminder that information placed behind a public sharing link can sometimes reach a much wider audience than expected.

I just learned your Claude AI chats could show up in Google -- here's how to check yours

Reviewing your conversations only takes a minute, but it can make all the difference in keeping your chats private I'm a big fan of the "Share" feature in Claude. I use it all the time to share Skills, Artifacts and conversations, mostly. But now I'm going to think twice before sharing. Over the weekend, security researchers and Reddit users discovered that hundreds of publicly shared Claude conversations could be found using Google search operators like site:claude.ai/share. The issue only affected chats that users had intentionally shared using Claude's public sharing feature -- private conversations that were never shared were not exposed. Still, the discovery caught many users by surprise because the conversations were turning up in ordinary search results, making them far easier to find than many people expected. What happened? Claude lets you generate a public link to a conversation so you can share it with someone else. That feature creates a snapshot of the chat at the moment you click Share. Anthropic's documentation notes that "anyone with the link can view the chat snapshot." The problem wasn't that private conversations suddenly became public, but that it was that some of those public links were indexed by search engines after they were discovered elsewhere on the web. Researchers who examined the indexed pages reported finding everything from software debugging sessions and internal business discussions to resumes, API keys, crypto wallet information and legal research. While those conversations had been intentionally shared at some point, many users appeared to assume the links functioned more like unlisted documents than publicly searchable web pages. By Monday, many of the indexed results had already disappeared from Google Search, suggesting the pages were being removed from search results or changes had been made to prevent further indexing. Should you be worried? If you've never used Claude's Share feature, this issue doesn't affect you. Likewise, chats that remained private inside your Claude account were not exposed. However, if you've shared conversations in the past -- especially ones containing work documents, personal information, code or anything confidential, it's worth checking which links are still active. Even if a page no longer appears in Google Search, anyone who already has the shared URL can still access that conversation until you remove the share. How to check your shared Claude chats You can view your shared conversations by signing in to your Claude account: Open Settings. Select Privacy. Click Shared Chats. Review your active shared links and delete any you no longer want to be public. If a conversation contains sensitive information, removing the share link immediately revokes public access. A good reminder for every AI chatbot This isn't the first time an AI company's sharing feature has raised privacy concerns. Similar issues have surfaced before with ChatGPT as users increasingly treat AI assistants like private notebooks, only to discover that sharing a conversation creates a public webpage rather than a private collaboration link. Whether you're using Claude, ChatGPT or another AI assistant, it's worth assuming that anything you intentionally publish with a share link could eventually be discovered by someone else. Before clicking Share, take a moment to make sure the conversation doesn't include passwords, API keys, financial information, customer data or anything you'd be uncomfortable seeing on the open web. Follow Tom's Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds. Subscribe to Tom's Guide on YouTube and follow us on TikTok. Finally, you can visit our dedicated Tom's Guide Savings Squad hub for expert help on getting the best products for less.

Your public Claude app may be searchable on Google

Why it matters: Most Claude users likely don't expect that the tools they're sharing with friends, coworkers or other intended recipients could be discoverable through the world's most popular search engine. The big picture: Claude is the latest AI chatbot to raise questions about how public AI-generated content is handled by search engines, following similar scrutiny over ChatGPT conversations. * In June 2025, users shared conversations with Meta's AI chatbots, including text conversations, audio clips and images they'd created on a public feed, seemingly by accident. Driving the news: Over the weekend, users on Reddit and X began warning that they could easily use Google to find Claude conversations and artifacts -- apps, documents, spreadsheets, web pages and other files created with Claude. * As of Monday afternoon, Axios was still able to find publicly shared Claude artifacts indexed on Google, but not Claude conversations people had with the chatbot. How it works: Claude conversations and artifacts are private by default, but users can choose to generate a public link to share either one with others. * Those conversations could include sensitive and private information. What they're saying: An Anthropic spokesperson said in a statement that the company does not "share chat directories or sitemaps with search engines like Google." * "These shareable links are not guessable or discoverable unless people choose to share them themselves," the spokesperson said. "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." * Anthropic added that these chats and artifacts are only searchable on third-party search engines after they've been shared somewhere a search engine can see -- such as a discussion forum or social media. Zoom in: Indexed Claude artifacts viewed by Axios on Monday included an apparent plan opposing the dissolution of a Miami city agency that oversees park management and another document about changes to a university's academic calendar. * Other indexed artifacts included business plans, infrastructure diagrams explaining multi-cloud environments and planning documents describing how a clinical trial could be conducted. * Axios could not immediately verify who created each artifact and whether the artifacts included legitimate information. The bottom line: A feature designed for sharing can become a privacy risk when users treat a public link as a private handoff.

Shared a Claude conversation? Google may have seen it.

Shared Claude chats were publicly accessible through Google Search. Credit: Avishek Das/SOPA Images/LightRocket via Getty Images If you've used Anthropic's AI chatbot Claude, and shared any of your Claude conversations with friends, those chats may have been publicly available via Google. That's what emerged this weekend when Reddit users noticed that shared Claude conversations were being indexed by Google Search. Seemingly private conversations between users and the AI chatbot, in other words, were publicly searchable on Google. According to Reddit, those affected included a Claude user who was creating a crypto wallet and accidentally exposed keys to the currency, and a lawyer asking the chatbot for legal advice on whether they had to self-report a breach of conduct. Anthropic has since addressed the issue. Google appears to have de-indexed and removed all shared Claude conversations from its search engine as of this writing. How did this happen? By default, Claude conversations are private. However, there is a feature which lets users share specific Claude chats. When doing this, Anthropic creates a static page that allows users to share the chat with others -- and also made it indexable by search engines. Simple "noindex" tags can be included in a web page's code, telling search engines not to index a page. It does not appear that Anthropic used those tags. That means each shared Claude conversation had the potential to be indexed by Google. Reddit users were able to find shared Claude conversations by searching for "site:claude.ai/share." This query would pull up all indexed pages using that URL structure, which every shared Claude conversation utilized. Does AI have a privacy problem? The shared Claude chats have since been removed from Google. But this isn't the first time we've seen insecure AI chatbot conversations. Last year, ChatGPT users experienced the same issue; their shared conversations were also being indexed by Google. OpenAI pulled the feature once users began finding shared conversations in Google Search. The same thing happened with Claude before too. Just one month after the ChatGPT incident, shared Claude conversations were discovered in Google Search. Anthropic was able to remove them from Google and addressed the issue at the time, saying it had blocked search engine crawlers. Yet it seems shared Claude chats were still being indexed. Mashable has reached out to Anthropic for more information, and we will update this piece if we hear back. How can I check privacy on my Claude conversations? If you've never shared a Claude conversation, you have no need to worry. This wasn't a leak of private conversations, which is what all Claude chats are by default. The issue affected only shared Claude chats. If you have shared Claude chats, then there's a chance your conversation was publicly available via Google Search. To manage that feature, simply login to your Claude account, go to Settings, followed by Privacy, then Shared Chats, and click on Manage. You should see a list of all your shared chats, and sharing can be turned off for all of them.

Uh-oh: Some Claude shared conversations and Artifacts appear to be indexed and publicly accessible on Google Search

Over the weekend, Reddit user -void1 posted an alarming discovery on the r/ClaudeAI subreddit: some conversations that users of Anthropic's Claude AI chatbot had made "shareable" via a link were being indexed by Google Search, and could be clicked on and accessed by seemingly anyone. The conversation took off on the social networks X and Reddit, the latter with thousands of upvotes and comments, many expressing concern about user privacy and information security, and the additional finding by users that shared Claude Artifacts -- including interactive applications, dashboards, documents and other AI-generated work products -- were also appearing in Google Search results. VentureBeat independently verified that some Claude Artifacts not shared directly with us were indeed searchable and accessible via Google. We could not access any shared conversations. By Sunday morning, many of the original Google search results for shared Claude conversations appeared to have disappeared or become significantly harder to find, suggesting either Google, Anthropic or both had begun taking action. The exposure could carry broader implications for enterprise users. Anthropic has increasingly positioned the feature as a collaborative workspace for building and sharing software, dashboards, documents and other business assets rather than simply chatbot responses. I have reached out to Anthropic for comment and will update this article when the company responds. A simple Google search yields a trove of Claude conversations Reddit user -void1 posted to r/ClaudeAI on July 25, 2026, demonstrating that the Google query surfaced numerous publicly accessible Claude conversations. Screenshots shared across Reddit and X showed Google returning pages from Claude's URLs, while other users reported finding conversations containing cryptocurrency wallet creation, legal questions, résumés and internal business discussions. While many users expressed concern that conversations they believed were effectively "unlisted" could become discoverable through public search engines, others argued the behavior reflected the expected consequences of creating publicly accessible share links rather than a software vulnerability. Why the exposure of Claude Artifacts may be even more concerning On July 26, X user Om Patel, founder of research firm BigIdeasDB, posted allegingthat searches such as surfaced publicly shared applications, dashboards, reports and documents. Screenshots circulating online appeared to show search results referencing internal-looking proposal documents and other business materials. Another widely circulated post warned that users often interpret "Anyone with the link" as equivalent to an unlisted YouTube video -- accessible only if someone possesses the URL -- not necessarily as content eligible for indexing by public search engines. VentureBeat independently verified that multiple third-party Claude Artifacts appeared in Google Search results for the query and were accessible without authentication, despite the URLs not being previously known to the reporter. However, VentureBeat has not independently verified the full volume or representativeness of the examples circulating on social media. The reports are particularly significant because Artifacts has become one of Anthropic's flagship product initiatives. First introduced alongside Claude 3.5 Sonnet in June 2024, Artifacts transformed Claude from a conventional chatbot into a collaborative workspace capable of generating interactive web applications, dashboards, visualizations, documents, games and other live software alongside a conversation. VentureBeat previously described the launch as potentially marking the beginning of an "interface war" among AI companies, shifting competition from raw model performance toward collaborative AI workspaces. Anthropic subsequently rolled Artifacts out to all Claude users, saying tens of millions had already been created, before expanding the concept again this year into Claude Code. That update allows engineering teams to publish live HTML dashboards and interactive project workspaces directly from coding sessions, making Artifacts an increasingly important part of Anthropic's enterprise strategy. That broader functionality raises the potential stakes if publicly shared Artifacts were also being indexed. Unlike ordinary chat transcripts, Artifacts can contain interactive software prototypes, engineering dashboards, planning documents, product mockups, data visualizations and other work products organizations increasingly rely on to collaborate across technical and business teams. If those pages become searchable through public search engines, the exposure could extend well beyond conversational text. A reality check on privacy, information security and the open web Importantly, nothing so far suggests attackers gained access to private Claude accounts or conversations. Rather, the controversy centers on conversations and Artifacts that users explicitly chose to share publicly via Claude's sharing tools. The dispute instead is whether users reasonably understood those shared pages could become discoverable through public search engines rather than only by recipients possessing the link. Technically, pages that are publicly accessible without authentication can generally be indexed by search engines unless publishers explicitly prevent crawling through mechanisms such as directives or other indexing controls. Several Reddit commenters noted that Claude's long, randomly generated share URLs are effectively impossible to guess. Instead, search engines typically discover them only after links appear somewhere they are permitted to crawl, such as public websites, forums or social media posts. Others questioned exactly how Google initially discovered so many Claude share URLs. The issue also illustrates a growing challenge for AI companies as chatbots evolve into collaborative workspaces for creating software, documents, dashboards and business applications. Features originally designed to make sharing AI-generated work easier now increasingly expose assets that may carry significantly more business value than a simple conversation. As enterprises adopt AI as a platform for building internal tools and workflows, the distinction between "shared by link" and "publicly discoverable through search" becomes far more consequential. A recurring challenge for AI companies Anthropic is far from the first AI company to confront the distinction between "shared" and "searchable." Reddit users quickly pointed out that OpenAI previously faced criticism after publicly shared ChatGPT conversations became discoverable through Google, prompting similar debates over whether "share by link" should imply a publicly indexed webpage or something closer to an unlisted document. Anthropic's situation also echoes an incident involving Google's pre-Gemini AI assistant, Bard, in September 2023. SEO consultant Gagan Ghotra discovered that Google Search had begun indexing shared Bard conversation links, warning that users could mistakenly assume they were sharing conversations only with intended recipients rather than making them discoverable through search. Google later responded publicly that it did not intend for shared Bard chats to be indexed and said it was working to block them from Google Search while emphasizing that only conversations users explicitly chose to share were affected. Together, the Bard, ChatGPT and now Claude episodes suggest AI companies continue to wrestle with the boundary between content that is technically public on the web and users' expectations that "share with a link" behaves more like an unlisted Google Doc or YouTube video than a webpage eligible for indexing by search engines. What enterprises should do now For organizations deploying generative AI broadly across employees, the distinction between "shared with a link" and "publicly discoverable through search" is not merely semantic. It can determine whether an internal engineering dashboard, financial model, product roadmap, customer-facing prototype or AI-generated application remains effectively private -- or becomes visible to anyone using a search engine. Whether this ultimately proves to be a technical indexing oversight, a mismatch between product design and user expectations, or some combination of both, the episode serves as another reminder that AI products are increasingly functioning less like chatbots and more like collaborative operating systems for knowledge work. As those platforms begin hosting internal dashboards, software prototypes, financial analyses, business planning documents and increasingly sophisticated enterprise applications, seemingly small decisions about how shared links behave can have outsized consequences for enterprise security, product design and user trust. Enterprise leaders should consider taking several practical steps: For now, it appears Anthropic has begun limiting the visibility of at least some shared pages in Google Search, though reports suggest cached copies, archived pages and indexing by other search engines may persist for some content. Enterprises that have relied on Claude's sharing features may wish to review existing shared conversations and Artifacts while Anthropic's investigation continues.

That Claude chat you shared? Google may have seen it too

Public chat links were indexed by Google, potentially exposing sensitive information shared with the AI. If you've ever shared a Claude conversation using a public link, it might be worth checking your privacy settings. Over the weekend, users discovered that publicly shared Claude chats and Artifacts were appearing in Google Search and other search engines through queries such as site:claude.ai/share. The indexed pages reportedly included everything from resumes and business documents to API keys, health information, and other sensitive conversations that users likely never expected to become searchable. How did this happen? Importantly, this wasn't the result of a hack or data breach. Instead, the conversations were shared using Claude's built-in Share feature. Claude allows users to generate a public share link, creating a snapshot of a conversation that anyone with the URL can access. That snapshot also includes any Artifacts such as interactive documents, apps, or code generated during the conversation. While the feature is intended for collaboration, users discovered that some of these public pages had also been indexed by search engines, making them discoverable through simple Google searches. The issue first gained traction after Reddit users noticed hundreds of searchable Claude conversations over the weekend. Reports suggest that many users assumed "anyone with the link" meant the content wouldn't appear in search results unless someone explicitly shared the URL with them, leading to understandable confusion once Google indexing came to light. What Anthropic and Google are saying Anthropic says the behavior wasn't the result of a bug or data breach, but rather how its sharing feature is designed to work. The company told TechCrunch that Claude chats remain private by default, and it doesn't publish chat directories or sitemaps for search engines. However, if a user shares a public Claude link on a website, forum, or social platform that can be crawled, search engines may index it like any other publicly accessible webpage. The company's Privacy Center also states that shared chats create a public snapshot of the conversation, including any Artifacts generated before the link was created. Users can revoke access at any time by heading to Settings > Privacy > Shared Chats and unsharing the conversation. That said, previously indexed pages may continue to appear in search results or cached archives until they're refreshed. Recommended Videos Google, meanwhile, says the responsibility lies with the website hosting the content. In a statement to TechCrunch, spokesperson Ned Adriance said search engines don't decide which pages are made public, noting that Google provides website owners with controls to prevent crawling or indexing and respects those directives. The incident serves as a timely reminder that once content is made publicly accessible on the web, it can often be treated like any other webpage -- even if it started as a private AI conversation.

Users seemingly private conversations with Anthropic's Claude showed up in Google search results | Fortune

A trove of seemingly private conversations with Anthropic's Claude chatbot turned up in public Google search results last weekend. Some of the conversations reportedly included sensitive information like cryptocurrency wallet keys and personal details such as names and addresses. The problem affected chats where users had made use of Claude's "share" feature -- which people typically use to send a record of a conversation to another person. The issue surfaced over the weekend, when members of a discussion channel about Claude on the social media site Reddit found that typing a specific search phrase into Google would pull up a long list of shared Claude conversations. Claude's Artifacts -- interactive tools and mini apps people build inside Claude -- also appeared in results. The topics of the seemingly inadvertently exposed chats ranged from erotica, programming chats, work notes, and fake book reviews. One chat -- which was labeled as "shared by Anthropic" -- showed Claude generating explicit content, which goes against Anthropic's policy on erotica. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google," an Anthropic spokesperson told Fortune. "These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." The company does appear to have fixed the issue, as the links are no longer available via Google through the technique shared on Reddit. Still, at the time of writing, many of the previously exposed chat links remained live and reachable to those already with the link. Claude conversations are private by default -- the only chats affected were those that users had "shared" with someone else. Claude's share button works the way most competitors' do: when users select it, Claude creates a snapshot of your conversation at its own web address, meant to be sent to one person or a small group with that link. The links do not give anyone access to a user's full account or all chats that a user has engaged in. It's not the first time Claude chats have found their way into public Google searches. According to Forbes, the same type of problem affected the company last year, and a nearly identical issue exposed almost 100,000 ChatGPT conversations on Google. Elon Musk's Grok chatbot has also been affected by the same problem in the past. This is because the "share" feature on AI chatbots creates a unique URL for the conversation, and these links were automatically published and left open to search engines, often without users' knowledge. As users increasingly share sensitive information with chatbots, incidents like these risk exposing massive amounts of private data and information. Shared chats are typically more sensitive than things like a shared document, as people treat chatbots as a place to think out loud about work, health, and legal problems in a way they wouldn't necessarily want made public. The fact that OpenAI, Anthropic, and xAI have each stumbled into versions of the same mistake also suggests its problem the industry has struggled to permanently fix.

Your Claude Chats May Have Been Exposed on Google

This is the second time this has happened with Claude chats, though ChatGPT had a similar incident last August. Chatbots are designed to make you feel like your conversations are personal. They're highly agreeable, and over-friendly, and simulate the experience of chatting with a friend online -- assuming that friend can instantly generate a wall of text in a few seconds. In reality, however, they're far from personal, especially if your definition of "personal" includes "for your eyes only." Claude chats were visible on Google this weekend Some Claude users can attest to that fact after the weekend. As Cyber Security News reports, Anthropic's Claude share links have appeared in Google search results, indicating search engines like Google have indexed users' chats. Over the weekend, a viral Reddit post highlighted how, by simply adding "site:claude.ai/share" to your search queries, you could pull up real Claude chats directly in Google. If a Claude user talked about the keyword you searched, and Google indexed that conversation, you could pull it up and read the transcript. According to Cyber Security News, that included lawyers discussing legal strategies, engineers talking through technical issues, and users being open with their personal problems. Depending on the conversation, that could range from mildly embarrassing to downright mortifying. Now, some caveats: Anthropic quickly nipped the issue in the bud after the Reddit thread started making waves. If you try to search anything with "site:claude.ai/share" now, you'll simply receive a failed search result in return, so all your Claude chats should be safe going forward. Perhaps most importantly, it doesn't seem likely that these indexed chats affected everyone who uses Claude; rather, these were "share links," which Claude generates when you share a conversation with someone else. The glitch appears to stem from this feature -- if you shared a chat from Claude, it may have ended up in this searchable database. That said, not all the leaked chats might have fit that criteria. This same situation happened back in September, and, as Futurism reports, at least one affected user denied sharing their chats. Taken at their word, it's possible that some exposed Claude chats were also from users who never used the share chat function. AI chats aren't private Even if you're confident your Claude chats weren't shared, or trust that the leak has been plugged, that doesn't mean that your AI chatbot conversations should be treated with an assumption of privacy. Even if you never shared a conversation from Claude, and thus likely weren't affected by this issue, your chats may not be contained within your account. While you might think what you say with your AI stays between you and the chatbot, everything you say to your bot is shared with Anthropic and used to train future models -- unless you explicitly opt out. That's not just Anthropic: Most, if not all, AI companies operate this way, and each has its own set of policies. Some may have humans directly reviewing your chats, for example -- something you might not think about when asking your AI bot for help with a personal issue. Even if you opt out of data training, the company in question may still hold onto your chats for a set period of time. Anthropic, for example, will hold onto your chat data for 30 days after you delete the conversation. So not only is that data held on Anthropic servers in the first place, it lives there after you can no longer access it. Plus, Anthropic isn't the only company dealing with indexing exposure: While this is the second time this happened to Claude users, ChatGPT users dealt with a similar problem last August. If you do choose to use chatbots, never share personal or private information with them -- especially highly sensitive data like health info. AI is undoubtedly here to stay, and many find it useful, but if you care about your privacy, these tools simply don't have your best interests in mind.

Claude users' shared conversations were showing up in Google searches

Thousands of conversations between Claude and its users, alongside tools created during those chats, were available for a period of time through Google searches earlier this month -- echoing a similar issue that blighted OpenAI's ChatGPT and was first reported by Fast Company almost a year ago to the day. Among the conversations available through a simple Google search that has now been fixed were purportedly those involving sexting and one where an engineer is launching "a project meant to train future Security Engineers in Web/Cloud/AI Security." Redditors spent large parts of the weekend uncovering embarrassing or potentially private conversations, but Anthropic appears to have delisted the results from Google over the weekend. "This is wild to see," says Rachel Tobac, a cybersecurity analyst and CEO of SocialProof Security. "It's the exact issue we talked about before." In July 2025, Fast Company exclusively revealed a similar issue with ChatGPT that OpenAI initially suggested was not significant because the information that chats shared when a checkbox was ticked could be indexed by search engines was presented in smaller, lighter text in a popup. It then pulled the ability to opt in to allowing chats to be indexed by search engines within a week.

Anthropic responds after Claude conversations appeared in Google Search results

Users of Claude should be concerned, as a treasure trove of share links has appeared in public search results, raising fresh and very warranted concerns around conversation privacy with AI models. The spotlight was put on Anthropic's Claude over the weekend after a Reddit post gained significant traction on the r/ClaudeAI subreddit. The post showed a screenshot of a Google Search result with the following in the text box, "site:claude.ai/share," and below it a bunch of clickable conversations with Claude. For those who don't know, Claude can create publicly shareable links of conversations, which enable users to share conversations between each other, which can be for various purposes such as sharing ongoing software development, brainstorming sessions, designs, and more. According to the Reddit post, these publicly shareable conversations contain "noindex" tags, which is a standard instruction website owners can give to search engines informing them they can visit the page, but cannot list it in search results. Typically, Google, Bing, and other search engines honor this request. Notably, if the page has "noindex," it is still reachable if you know the specific URL. However, it appears not all of the Claude conversations contained "noindex" before being indexed by Google, as now those links have surfaced on social media platforms and the conversations have been exposed. The exposed chats covered topics such as legal strategy discussions from lawyers, technical troubleshooting, personal conversations of a sexually provocative nature, and other personal and sensitive user conversations. The good news is, many of these links have since been removed from Google Search, and attempting to use the "site:claude.ai/share" search query now produces zero results. While the problem seems to have been solved, its initial existence highlights a rapidly concerning aspect of sophisticated AI reliance and the convenience it offers at the potential cost of privacy violations.

Claude AI Chats Leaked: Your private conversation with AI might be on Google right now. Here's what you should do

Users discovered personal conversations from Claude chatbots appearing in Google searches. These shared links, intended for private sharing, became publicly accessible. Anthropic stated that shared links function like any public webpage. This issue has previously affected other AI chatbots like ChatGPT and Grok. Users are advised to avoid sharing sensitive data and to review past shared links. If you've ever typed something deeply personal into an AI chatbot thinking it was just between you and the machine, this story is worth your attention. Over the past week, users of Anthropic's Claude discovered something unsettling: conversations they believed were private had turned up in ordinary Google searches. Not obscure, hard-to-find pages, plain search results that anyone could stumble onto. And the contents weren't harmless small talk. Reports point to cryptocurrency wallet keys, home addresses, résumés with real names and phone numbers, and even tax-related documents sitting out in the open. How Claude AI Private Chats Ended Up PublicThe trouble traces back to a feature most Claude users have probably used at some point, the "share" button, which lets someone generate a link to send a conversation to a colleague or friend. It sounds harmless enough. The catch is that once that link exists, it behaves like any other public webpage: search engines can crawl it, index it, and serve it up to anyone typing the right query. Also Read: 'Americans eating like': Rynair mocks US eating habits, shares viral video of a girl dipping butter in cola drink According to posts that circulated on Reddit, simply searching a specific phrase on Google was enough to surface a long list of these shared Claude chats, along with "Artifacts," the mini apps and interactive tools people build inside Claude. One user with a sizeable following on X reportedly went further, saying he'd found not just chats but shared workspaces containing financial records, legal drafts, and health information baked into these artifacts. Anthropic's Responds to Claude AI Chat Leaks AllegationsAnthropic pushed back on the idea that it was actively feeding these conversations to search engines. The company's position, relayed to reporters, is essentially this: it doesn't hand chat directories or sitemaps to Google, and share links aren't something people could stumble upon by guessing a URL. In the company's telling, the responsibility shifts once a person actively chooses to share a link, at that point, it says, the content is functioning like any other public web page, which means it can legitimately be picked up and archived by outside services. Critics weren't entirely convinced by that framing. Their argument is simpler: if a "share" button doesn't warn users clearly that their conversation could end up searchable by literally anyone, most people will never think to protect themselves. This Isn't Anthropic's First TimeWhat makes this episode sting more is that it isn't new. Roughly a year ago, a similar flaw led to hundreds of Claude chats getting indexed, forcing Anthropic to scrub them from the web. The company doesn't stand alone here, either, OpenAI's ChatGPT faced almost the exact same problem, with tens of thousands of shared conversations turning searchable overnight, and Elon Musk's Grok chatbot has run into comparable trouble too. The common thread across all three: a "share" or "public link" feature that quietly forgets to tell search engines to stay out. Anthropic says it has since removed the exposed links from Google's index. But there's an important caveat, anyone who already saved, bookmarked, or forwarded one of those links before the fix may still be able to open it. Removing a page from search results doesn't necessarily kill the page itself. Why This Should Worry You, Even If You've Never Used ClaudePeople don't talk to AI chatbots the way they write emails or documents. There's a tendency to think out loud, venting about a health scare, drafting a legal complaint, pasting in a private contract to get a second opinion, or troubleshooting code tied to a company's internal systems. Security researchers point out that this makes leaked AI chats potentially more revealing than a leaked folder of files, simply because people are less guarded when they're "just asking a question." What You Can Do Until AI companies build sharper safeguards, proper no-index tags, expiring links, or login walls on shared content, treat any "share" button on an AI tool the same way you'd treat posting something on the open internet. A few practical habits: Also Read: Pyrocumulonimbus: France-Spain wildfires are creating rare 'fire clouds' that spark their own lightning Avoid pasting sensitive details, wallet keys, ID numbers, medical records, into any chatbot, shared or not. If you've ever used Claude's share feature, revisit your shared links and delete ones you no longer need active. Search your own name or unique phrases from past chats on Google occasionally, just to check nothing of yours slipped through. The bigger lesson here isn't really about Claude specifically, it's a reminder that "private" and "shared" are two very different things once an AI tool is involved, and the industry hasn't fully caught up to that yet.

Thousands of Claude chats are showing up in Google Search: Here's how to protect your privacy

Avoid sharing chats containing personal, financial, or confidential information to protect your privacy. Claude is one of the most widely used AI tools for writing code, planning businesses, brainstorming ideas, and even discussing personal matters. However, a recent post has put Anthropic's AI chatbot under scrutiny. The post claims that conversations shared through Claude can be discovered via Google Search using a simple search query. If true, then it's a big privacy concern, as the chats could contain sensitive pieces of code or the personal matters of the users. The company is yet to say anything on the matter. Follow along with the article to learn how you can safeguard your shared Claude chats. According to a post shared by Vaibhav Sisinty on his official X platform, when he searched 'site:claude.ai/share' on Google, it revealed a large number of publicly shared Claude conversations. These pages include coding projects, business ideas, research notes, creative writing, and other AI-generated work. He further added that when users click the Share button in Claude, the platform creates a public webpage that anyone with the link can access. If search engines are allowed to crawl that page, it can also become searchable on Google. While some users intentionally share conversations with colleagues or friends, others may not realise that these pages could later appear in search results. Also read: Sam Altman to brief US government on OpenAI 's next AI model before public release: Report Sisinty also clarified that some of these chats are intentionally shared online, while many users are likely unaware that their shared conversations can end up being publicly indexed. Do note that not all conversations between users in Claude are getting indexed on Google. The search engine decides which pages to index. Thus, many of those shared may never become visible. Still, if the shared page becomes indexed, it is easy to find using Google. How to be safe If you use Claude frequently and don't want your shared conversations to appear on the Google search page, then open Settings > go to Privacy > check the Shared chats section to see which conversations have been shared. Also read: Google Pixel 11 Pro to launch in few weeks: Expected India price, features and more Make sure that chats that contain personal details, passwords, financial information, confidential work, or sensitive business plans are deselected. Moreover, when you share a conversation again, keep in mind that the conversation may become accessible to anyone with the link and could also be indexed by search engines, so check the sharing details once.