Claude AI shared chats exposed in Google search results, raising AI chatbot privacy concerns

Private Claude Chats Exposed in Google and Bing Search Results

What happens between you and an AI chatbot does not always stay between you and a chatbot. Just ask Google. Over the weekend, people were surprised to discover that some Anthropic Claude chats could be easily found via web search. The issue, which appears to have been first flagged by a redditor, exposed chats that included people asking for advice about what political party they should join, whether attorneys in Kansas are required to self-report when they believe they've committed an ethical violation, and erotic role play. Claude allows users to share with other people "snapshots" of chats by creating a public URL to a specific chatbot thread. The reasons some of these URLs were indexed by major search engines comes down to the basic functions of websites, search engines, and the collision of the two when generative AI gets in the mix. Basically, Anthropic instructs web crawlers, like those used by search engines like Google and Bing, not to index chats a user decides to share with other people. The company does this via something called a robots.txt file, which has long been considered the standard way to tell web scrapers what parts of a site are appropriate to access. Anthropic's robots.txt has made "shared" chats off limits to web scrapers since at least September 2025, according to a snapshot on the Wayback Machine. But it's harder to prevent pages from being included in search engine results than you might expect. Bing, which still shows "about 612 results" if you search "site:claude.ai/share" at the time of this writing, says in its technical documentation that developers can block the search engine's web crawlers using robots.txt -- but that web developers should also include a "noindex" tag on individual pages as well. Some of the chats that showed up in search results flagged in the Reddit post were deleted by the time WIRED viewed them, and results no longer show up in Google when you search the "share" query that still worked on Bing. In a developer guide, Google says that it ignores robots.txt instructions if that page is linked to from elsewhere on the internet and the page owner doesn't also include a special "noindex" html tag on the page or a "x-robots-tag" in the page's response header. WIRED reviewed a sample of the exposed Claude chat pages and found that they did not include the "noindex" tag that both Bing and Google say they take into consideration when deciding whether or not to index a page. Microsoft, which owns Bing, did not provide comment ahead of publication. Anthropic did not respond to multiple requests for comment. Google spokesperson Ned Adriance tells WIRED that the indexing of shared Claude chats is Anthropic's responsibility. "Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines," Adriance says. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." Anthropic didn't respond to questions about why it didn't include the "noindex" tag on the shared chat pages. Last September, Anthropic got heat for the same issue, and told Forbes that it uses robots.txt to let crawlers know they shouldn't access the shared chats. But as the Forbes report points out, there's no guarantee that will stop search engines from indexing specific web pages. Even if robots.txt doesn't always work to prevent pages from being indexed on search engines, AI labs are still making use of it for other purposes. Many labs promise creators that their websites won't be used as AI training fodder so long as the developers make sure to "disallow" certain crawlers in their robots.txt files, and the labs themselves take that advice as well. Anthropic, Meta, and OpenAI all include instructions in their chatbots' robots.txt files that "disallow" their competitors' web crawlers from accessing any part of the website where the chatbots are hosted. OpenAI and Meta did not respond to a request for comment about the practice. Google did not address WIRED's questions about the fact that its competitors are blocking its AI training crawler, Google-Extended, from their chatbots' sites. Though shared chats are no longer turning up in Google results, the pages WIRED reviewed still don't have a "noindex" tag, meaning that they could potentially show up in search engines again. Claude users can go to Settings > Privacy > Shared chats to manage access -- and keep their secret conversations private. Additional reporting by Andrew Couts.

Private Claude Conversations Have Been Indexed by Search Engines - CNET

Blake has over a decade of experience writing for the web, with a focus on mobile phones, where he covered the smartphone boom of the 2010s and the broader tech scene.... Read full bio Over the weekend, private Claude AI chats were made publicly accessible by search engines like Google and Bing, making for a privacy nightmare for the people involved and the chatbot's maker, Anthropic. Privacy concerns surrounding AI have always been around, but as these tools become more capable of pushing into your daily workflow with agentic capabilities, the threat of private data exposure is more timely than ever. This latest example shows that even simply sharing a conversation with others can get it exposed to a significantly larger audience. This latest example shows that even simply sharing a conversation with others can get it exposed to a significantly larger audience. Initially spotted by Reddit users, the common factor in the problem seems to be that the indexed conversations were shared -- a common option within most AI chats -- allowing "anyone with the link" to view what had been said in the Claude conversation itself. This feature is apparently not completely protected from web crawlers, and personal conversations, while initially shared by users with people they chose, were exposed for the entire internet to see if one knew where to look. Conversations indexed included medical records, sensitive personal information, internal corporate data and explicit content. They could be viewed within Google and Bing with a simple search and adding "site:claude.ai/share" to the query, yielding a trove of conversations, most of which have since been removed. Artifacts -- tools, visualizations and shareable apps -- were also accessible through search engines. This isn't the first time this has happened: Last year, Forbes reported the same thing happened with Anthropic -- hundreds of conversations appeared on Google search results, only for them to be scrubbed later. An Anthropic spokesperson told CNET that its system is working as it should and that when people decide to share their conversations, they're making them publicly accessible. "Shareable links are not guessable or discoverable unless people choose to share them themselves," the spokesperson said. "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." If ever there were a good time to adjust your privacy settings and delete old conversations from your go-to AI chatbot, it's now. To view your shared chats in Claude, you can go to Settings > Privacy > Shared Chats.

Claude AI shared chats indexed by Google - see if your conversations were exposed

Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways * Claude AI shared chats were surfaced by Google queries, Reddit users reveal. * Private chats were not leaked, and Anthropic reacted quickly. * To keep your conversations safe, be cautious about creating share links. Claude has, once again, become the eye of a cybersecurity and privacy storm, much to the amusement of Reddit users. It was only back in June that Anthropic, the creator behind the popular Claude AI chatbot, had to revoke access to Fable 5 and Mythos 5 due to a White House directive and concerns surrounding a vulnerability or jailbreak. The vagueness and lack of transparency surrounding this issue, however, are in direct contrast to the latest issue facing Claude's PR team: the exposure of shared chats through a simple Google query. Also: Claude Opus 5 arrives with near Fable performance at half the price Claude AI shared chats indexed by Google Over the weekend, Reddit users in a Claude-related forum revealed that a simple Google dork (or search query), site:claude.ai/share, could be used to pull up chats from Claude AI, ranging from adult fanfiction to news discussions, the creation of fake book reviews, and conversations about programming. It appears that Anthropic was made aware of the indexing fallout very quickly, as the Reddit thread indicates the Google dork stopped working soon after, and the lists of Claude AI chats vanished from Google. However, many of the links that have been shared are still active, and most are decidedly not funny. On the contrary, many of the topics are deeply personal and may have financial or legal repercussions, according to ZDNET's findings. (Some users also claim to have found chats involving cryptocurrency wallets, although we have not been able to confirm this.) Also: OpenAI's agent breached Hugging Face before an AI defender caught it: What users should do next The fun might now be over for Reddit forum users, but the situation has highlighted a problem that should not have existed in the first place. This isn't the first time AI chat conversations have been inadvertently leaked online, either, with similar scenarios involving ChatGPT and Grok last year. Were private chats leaked? Thankfully, no. Claude has a shared chats feature that allows users to share conversations with others, if they want to. By clicking the "Share" button in the upper right corner of your chat, a snapshot of your current discussion is created, and then you can copy the link and share it. This provides access to your conversation, but not your full account or other chats. It appears, however, that once these links were activated, there was no guardrail in place to stop them from being indexed en masse by Google -- or, potentially, by other search engines. How do I keep my conversations safe? Claude chats are private by default, and so unless you intentionally create a shareable link, your conversations shouldn't be exposed. To check that none of your conversations are shareable, head to Settings > Privacy > Shared Chats, then tap Manage. If you have previously shared a conversation but would rather it not be exposed to the internet, consider disabling any active sharing links. Also: I use Anthropic's Claude AI tools for very different jobs: How to pick between models, Code, and Cowork However, Anthropic should still address this and ensure that such indexing can't happen again. After all, Claude's sharing function doesn't mean "share and make available to everyone online." It's still a breach, albeit unintentional, and the company should take ownership of the problem beyond just applying a hotfix. Considering that collections of indexed chat links are now online, this should include disabling them server-side. ZDNET has reached out to Anthropic for comment, and we will update when we hear back.

Claude Chats Popped Up in Google Search Results. How to See If Yours Are Public

Be careful what you share. Chats with Anthropic's Claude AI were found indexed in Google search, briefly making them easy to find. On Saturday, a Reddit user reported that typing "site:claude.ai/share" into the Google search box revealed hundreds of Claude chats. They included some surprising conversations -- from weird conspiracy theories to asking for AI-generated erotic content -- along with the first name or handle of each affected user. The finding prompted some to accuse Anthropic of failing to protect user privacy. OpenAI faced a similar controversy last year when Google indexed shared user chats on ChatGPT that had been created with the public link function. In response, OpenAI removed the option to have chats appear in Google Search. But in Anthropic's case, the company says the share function never directly sent the link information to search engines such as Google. Instead, Anthropic suggested that users who posted links to their shared chats on a forum or social media platform had those chats indexed by Google's web crawlers. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google," Anthropic said. The share function on Claude is optional and lets you create a public link to a chat that anyone can view. Anthropic tries to prohibit search engine crawlers via its Robot.txt file, which disallows crawling of claude.ai/share. But Google notes: "While Google won't crawl or index the content blocked by a robots.txt file, we might still find and index a disallowed URL if it is linked from other places on the web." Anthropic added: "These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." Google also indicated that the indexing likely occurred because users had posted the shared Claude chats on the open web. "Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines," Google tells PCMag. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." Websites can also place a "noindex meta tag" to block a page from appearing in Google Search results. The scale of the exposure may have been relatively small. One user tried archiving the indexed Claude chats, but only recovered 519 conversations. Which Claude Chats Are Public? Following the controversy, Google and other search engines appeared to stop indexing the shared Claude chats. Searching "site:claude.ai/share" no longer produces any results. Others spotted Google indexing Claude "artifacts," or AI-created documents/projects that are shareable as well. However, the users responsible for them may have wanted them to be public. If you're worried about a chat surfacing on Google, Anthropic lets you shut down shared chats and artifacts. Go to Settings > Privacy > Your Data, where you can see which chats and artifacts have been shared, and rescind access. If you share a Claude conversation through a private messaging platform, Google's web crawlers shouldn't be able to index it.

Claude Chats Popped Up in Google Search Results. Who's to Blame?

If you share and re-post your conversation with an AI chatbot on the open web, don't be surprised if it ends up on a search engine. A trove of user chats with Anthropic's Claude AI has been found indexed in Google search, briefly making them easy to find. On Saturday, a Reddit user reported that typing "site:claude.ai/share" into the Google search box revealed hundreds of Claude chats. They revealed some surprising conversations -- from weird conspiracy theories to asking for AI-generated erotic content -- along with the first name or handle of each affected user. The finding prompted some consumers to accuse Anthropic of failing to protect user privacy. OpenAI faced a similar controversy last year when Google indexed shared user chats on ChatGPT that had been created with the public link function. In response, OpenAI removed the option to have chats appear in Google Search. But in Anthropic's case, the company says the share function never directly sent the link information to search engines such as Google. Instead, Anthropic suggested that users posted links to their shared chats on a forum or social media platform, and those chats were then indexed by Google's web crawlers. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google," Anthropic said. The share function on Claude is optional and lets you create a public link to a chat that anyone can view. Anthropic tries to prohibit search engine crawlers via its Robot.txt file, which disallows crawling of claude.ai/share. But Google notes: "While Google won't crawl or index the content blocked by a robots.txt file, we might still find and index a disallowed URL if it is linked from other places on the web." Anthropic added: "These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." Google also indicated that the indexing likely occurred because users had posted the shared Claude chats on the open web. "Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines," Google tells PCMag. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." Websites can also place a "noindex meta tag" to block a page from appearing in Google Search results. The scale of the exposure may have been relatively small. One user tried archiving the indexed Claude chats, but only recovered 519 conversations. Following the controversy, Google and other search engines appeared to stop indexing the shared Claude chats. However, others have spotted Google indexing Claude "artifacts," or AI-created documents/projects that are shareable as well, although the users responsible for them may have deliberately wanted to make them public. If you're worried about a chat surfacing on Google, Anthropic lets you shut down shared chats and artifacts. Go to Settings > Privacy > Your Data, where you can see which chats and artifacts have been shared, and rescind access. If you share a Claude conversation through a private messaging platform, Google's web crawlers shouldn't be able to index it either.

Hundreds of shared Claude chats, including resumes and health details, showed up in Google search

Serving tech enthusiasts for over 25 years. TechSpot means tech analysis and advice you can trust. What just happened? Anthropic has moved to block search engines from indexing shared Claude conversations after hundreds of chats appeared in public search results, highlighting how easily user interactions with AI tools can spread beyond their intended audience. The issue stemmed from Claude's sharing feature, which lets users create a link to a conversation. Those links were accessible without requiring a login, and search engines indexed them like any other public webpage. The exposure first came to light on Reddit, where users demonstrated how to surface the chats. At least 200 conversations appeared across more than two dozen pages of search results, including some created recently. Although the links have since been removed from search indexes, many of the conversations had already been saved and circulated. The chats themselves covered a wide range of subjects, but some contained sensitive information. Users shared resumes containing names, contact details, and work histories. In other cases, prompts included what appeared to be workplace material, such as a request to draft an unpublished blog post about a cloud security project. There were also conversations involving healthcare topics and what appeared to be transcripts of private exchanges. Anthropic said the situation was the result of user behavior, not a system failure. A company spokeswoman said users control when and how they share conversations, and that the links are not discoverable unless someone chooses to distribute them. "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services," she told The Guardian. She added that the links are "not guessable or discoverable unless people choose to share them themselves." Even so, the way the feature works leaves room for confusion. Claude tells users that "anyone with the link" can view a shared conversation, but it does not clearly warn that the link could be indexed by search engines. Once a page is publicly accessible, web crawlers can discover and catalog it unless steps are taken to prevent that. Google said it does not control what content becomes public. A spokesperson said the company provides website owners with tools to control whether their pages are crawled or indexed and that it adheres to those settings. In this case, Anthropic appears to have used those controls after the issue became public, removing the links from search results. The same links were also visible on other search engines, including Bing, Brave, and DuckDuckGo. This is not the first time AI chat logs have surfaced this way. OpenAI dealt with a similar issue last year involving ChatGPT, while X's Grok chatbot also saw large numbers of conversations become searchable. In each case, the underlying problem was not a breach but the way shared links interact with standard web indexing. The Claude episode makes clear how thin the line can be between private use and public exposure. Once a conversation is turned into a public link, it effectively becomes part of the open web, where it can be indexed, cached, and redistributed.

Some people's chats with Claude AI made publicly available online

Hundreds of user conversations with Anthropic's popular artificial intelligence (AI) chatbot Claude were found to have been available to essentially anyone using Google or other web browsers. Links to the chats, some of which included personal and work information, would show up if a user of a search engine like Google used a site-specific search term. The searches showed Claude chats for which a user had decided to "share" a link had been saved by search engines like Google, leaving them accessible to the broader public. The search availability of the chat logs was removed over the weekend, but many were saved and shared widely online. A spokeswoman for Anthropic said that Claude users maintained control over if and when to share conversations they had with the chatbot. She said links to conversations were "not guessable or discoverable unless people choose to share them themselves". "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services," the spokeswoman added. The share option within Claude tells a user that "anyone with the link" may view the contents of that link, but does not explicitly state that the link may end up in Google and search results. Users on Reddit initially discovered the publicly available chats, which covered more than 200 conversations with Claude across at least 25 pages of search results - some taking place just weeks ago. In the conversations, users prompted the chatbot to respond to a wide array of topics. Chat logs include a user asking Claude last year whether it wanted "to help me or do you want to help anthropic more?". The chatbot responded in part, saying "I experience something like wanting to help you". In one conversation from April, a user prompted Claude to draft an unpublished blog post about cloud security involving details of a corporate project. In another from last month, a user asked Claude how to "become become Nine-tailed fox?", before clarifying they wanted to literally transform from human to the creature. Claude first tried to show the user an AI-generated image claiming they had been given "fully functional fox powers!". Other conversations with Claude included users seeking help with their resumes, including their names, contact information and work history. Some users even conducted what appeared to be proprietary research for their work, such as in healthcare, including transcripts of private conversations. When OpenAI last year experienced an almost identical issue with ChatGPT chat logs being made publicly accessible, the company ultimately changed the ease with which such logs were accessible. Grok, the AI chatbot within X, the social platform owned by Elon Musk, also last year saw hundreds of thousands of chat logs made publicly available though online search. A spokesman for Google made clear to the BBC that the company does not control "what pages are made public on the web," saying instead that action comes from websites. "We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." As the search indexing of the chat logs is no longer occurring, it is likely Anthropic used available tools to quickly block the chat log links from search results. Google's process for a website owner to block a link is straightforward, but must be initiated by a website owner. Other search engines like Bing, Brave and Duck Duck Go, through which the Claude chat logs also appeared, were approached for comment.

Anthropic says leaked Claude chats worked as intended

Shared conversations, including medical records and children's contact details, were searchable on Google over the weekend. Anthropic says the share feature did exactly what it was built to do. Type the right query into Google over the weekend and you could read strangers' conversations with Claude. Some held medical records. Some held company files and children's phone numbers. The chats were not hacked or leaked in any technical sense. Users had shared them through a Claude feature built for that. Search engines then indexed the pages like any other public link. Anthropic's position is that nothing failed. The system, it says, is working as intended. How it surfaced A Reddit user flagged it on Saturday. The search operator "site:claude.ai/share" returned a long list of shared Claude chats. 404 Media first reported it on Monday, and the rest of the tech press followed within hours. Claude conversations are private by default. Only shared ones were affected. Sharing creates a snapshot of the chat at its own public web address, meant for a colleague or a small group. The problem is what "public" turned out to mean. A simple "noindex" tag tells search engines to leave a page out of results. It does not appear Anthropic used one. What was in them The exposed material was not trivial. Futurism reviewed the results through Google. It found a detailed medical report on a named patient, clinical-trial results listing patient names, and documents holding the names and phone numbers of primary-school-aged children. Other cases were worse for being ordinary. Reddit users cited a person building a crypto wallet who exposed its keys. Another was a lawyer asking Claude whether they had to self-report a breach of professional conduct. Claude Artifacts were caught in the same net. These are the interactive apps and documents people build in the tool. Internal dashboards and project plans with client data turned up alongside the chats. Anthropic's answer Asked what happened, Anthropic did not describe a fix. It described a design. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google," spokeswoman Amie Rotherham told TechCrunch. "These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible." The company added that links only reach search results once a user posts them somewhere a crawler can see. In effect, it placed the responsibility with the people who pressed share. The comparison that hurts That defence runs into an obvious counter-example. Google Docs offers a near-identical share feature. Those documents do not end up searchable on Google. The difference is the missing instruction to search engines. Google's spokesperson Ned Adriance told TechCrunch that site owners hold the crawl and index controls, and that Google respects them. The choice not to use them sat with Anthropic. Underneath is a gap between two definitions of consent. Anthropic is technically right that sharing makes content public. The harder question is whether the person sharing a patient file understood they were publishing it to the open web. It has happened before, at every lab This is not new, which is what makes it striking. Forbes reported almost the same thing last September. Google had indexed just under 600 Claude conversations before removing them, and Anthropic said then it had blocked crawlers. OpenAI walked into it too. Last year 404 Media found nearly 100,000 shared ChatGPT conversations searchable on Google, and OpenAI pulled the feature. Elon Musk's Grok was caught the same way. Anthropic has had a run of data-exposure stories this year. Researchers showed Claude Cowork could break out of its sandbox and read credentials on a Mac. Grok Build was found uploading whole code repositories. Those were bugs. This was the product working correctly. What to actually do Anthropic appears to have addressed the indexing. As of Monday afternoon the search technique returned nothing. Anyone already holding an old link can still reach it, though, and content can linger in caches and third-party archives. Users can review what they have shared under Settings, then Privacy, then Shared Chats, and revoke any link there. The wider lesson sits above any one setting. Chatbots now absorb the role of confidant for work, health and legal worries, so the share button carries far more than a link. Anthropic's own tightening privacy regime shows it knows the stakes. Tools like credential systems that never expose the underlying data show what careful handling looks like. A feature that quietly publishes a medical file is the opposite, and calling it intended does not make it safe. The pattern of AI security failures this year keeps pointing at one root: systems that treat access as consent.

When You Share Claude Chats, You Might Be Sharing Them With Everyone

It turns out Claude may not be the best confidant (well, at least if you're not careful with your privacy settings). Over the weekend, we got yet another reminder that conversations with chatbots are not guaranteed to stay within the chat box. Some users on Twitter and Reddit showed that conversations with Anthropic's Claude can be crawled and made searchable on Google, essentially readable by anyone who comes across them. The conversations that show up in Google search appear to be both conversations and "Artifacts," which are the lines of code, documents, and even vibe-coded apps that Claude generates in response to a user's prompting. And because people are not always all that careful about what they put into Claude or other chatbots, these indexed conversations include some pretty personal information. Futurism reported spotting documents that included a patient's medical history, clinical trial results, sensitive internal business documents, and a directory of phone numbers for primary school students, among other things. 404 Media found a vibe-coded AI therapy app, meeting notes, and medical billing data. Reports from users on social media claim to have found personal information including home addresses, phone numbers, and some cryptocurrency wallet keys. So, how do these chats end up available for public viewing via Google search results? Per Anthropic, the issue is the privacy settings that these users have selected. Claude, like other chatbots, has a "share" feature that allows users to pass along their conversations and projects so others can see them. When a user does this, it creates a public link that can be seen by anyone who has access to the URL. Claude does provide somewhat of a warning for this: when users hit the "share" button, they get a message informing them that they are making that chat public and "anyone with the link can view" it. However, most users probably are not aware of the fact that it could end up getting spotted by a web crawler and made available for literally anyone to see. Anthropic told Gizmodo that the only way shared links end up in search results is when they have been posted somewhere that search engines can find them, like on a forum or social media. Links sent privately between two people supposedly stay just between those parties -- but that's assuming the other person doesn't further share the link or post it somewhere. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google. These shareable links are not guessable or discoverable unless people choose to share them themselves," a spokesperson for Anthropic told Gizmodo. "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." If you have shared a Claude link or if you aren't sure if you have, you can find it by going to Settings, then Privacy and clicking "Manage" next to "Shared chats" or "Shared artifacts." From there, you can choose to "unshare" a link and revoke access. At least then no one will be able to click through a Google search result and read your chat, though the indexed part will probably stick around in search for a bit. This same thing -- chats ending up indexed and publicly accessible -- has happened in the past with ChatGPT, Claude, and Grok. We'll probably get another reminder of this in a few months when people once again discover that this is happening. Probably just don't share your chatbot conversations, and definitely don't share sensitive information with those chatbots.

Google Search lists public Claude chats, raising privacy concerns

Google briefly indexed an unknown number of publicly shared Claude conversations over the weekend, allowing anyone to find them through simple search queries. The discovery raised fresh concerns about how AI chat-sharing tools handle sensitive information. Users reported finding conversations that included medical records, internal business documents, and personal details involving children. The issue centered on Claude's chat-sharing feature. It lets users create a public link so others can view a conversation or an Artifact, Anthropic's interactive documents and mini applications built inside Claude. Although the feature warns that anyone with the link can access the content, many users appeared to assume those links would stay limited to people they shared them with directly. Reddit users first noticed the issue after using Google search operators targeting Claude's public sharing pages. The searches surfaced numerous shared conversations that had become searchable through Google's index. By Monday afternoon, those search results no longer appeared during tests. That suggests the exposed pages were removed from Google's searchable index, although neither Google nor Anthropic explained exactly how the issue was resolved. Anthropic told TechCrunch that users control whether conversations become publicly accessible. "We give people control over sharing their Claude conversations publicly," spokesperson Amie Rotherham said. Anthropic added that it does not provide chat directories or sitemaps to search engines. Rotherham said shared links cannot be guessed or discovered unless users publish them. She added that conversations become public web pages once someone chooses to share them. Like other public content, they may then be archived by third-party services. Anthropic also said conversations shared privately through a direct link do not appear in search results unless someone later posts that link somewhere search engines can crawl. Before the pages disappeared from search, users reportedly uncovered a wide range of sensitive information. That included medical records, company documents marked for internal use and files containing children's names and phone numbers. Some exposed Artifacts also contained software code and employee work notes. The findings renewed questions about whether users fully understand the visibility of AI-generated work shared through public links. Google said search engines only index content that website owners make publicly accessible. Google spokesperson Ned Adriance told TechCrunch that neither Google nor other search engines decide which pages become public. He added that Google provides website owners with controls to prevent crawling or indexing and respects those instructions. The incident echoes a similar situation reported last year, when hundreds of Claude conversations briefly appeared in search engine results before disappearing. Researchers also identified publicly shared AI conversations on other chatbot platforms during the same period. Users who have created public Claude links can review them through the Privacy section of Claude's Settings menu under Shared Chats. The episode serves as another reminder that information placed behind a public sharing link can sometimes reach a much wider audience than expected.

Claude chats exposed in Google searches - another endorsement of Apple privacy

We've long cautioned against disclosing sensitive personal data in AI chatbot sessions, given that most companies use these as training data, but there's now an even bigger reason. Things got way worse over the weekend when Redditors discovered that you could access some Claude AI chats through a simple Google search ... Claude chats exposed Claude has a share option that allows you to share a chat session with a colleague, friend or family member. The chatbot generates a link you can send to one or more individuals, and Claude implictly assures you that nobody can see the chat knowing the URL. To share a chat: Click the "Share" button in the upper right corner of your chat. Once a chat has been shared, anyone with the link can view the chat snapshot. The problem is that Redditors discovered you don't in fact need the link to be able to view the chat. You can simply Google for it, either using specific search terms or just asking Google to show you all of the chats that have been shared in this way. BBC News reports: Hundreds of user conversations with Anthropic's popular artificial intelligence (AI) chatbot Claude were found to have been available to essentially anyone online [...] Users on Reddit initially discovered, external the publicly available chats, which covered more than 200 conversations with Claude across at least 25 pages of search results - some taking place just weeks ago. Literally all you had to do was tell google to search the directory used for shared Claude chats (site:claude.ai/share). As you might expect, some of the chat sessions were completely unhinged, like asking why the record industry was hiding the fact that birds co-wrote most of Jay-Z's albums. But others contained extremely sensitive information, such as transcripts of private conversations; a lawyer asking if they needed to self-report a breach of conduct; and a user asking for help creating a crypto wallet, and exposing their keys in the process. Anthropic has so far attempted to claim that this is not a problem. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services. The reality, of course, is that it is very much a problem, since this is not at all what users would expect. Worse, a Wired reports suggests that the underlying cause appears to be gross incompetence. WIRED reviewed a sample of the exposed Claude chat pages and found that they did not include the "noindex" tag that both Bing and Google say they take into consideration when deciding whether or not to index a page [...] Anthropic didn't respond to questions about why it didn't include the "noindex" tag on the shared chat pages. It follows yesterday's news about Claude Cowork being able to escape its sandbox on Mac and gain full access to all files. How to protect yourself The problem appears to have been at least partially addressed for now, with previously available search results now failing, but I would advise against using the share feature given that it relies on security by obscurity. I'd also advise removing any past shared chats. You can do this in Settings > Privacy > Shared chats > Manage. Another endorsement of Apple's approach Apple has a three-tiered approach to privacy in Apple Intelligence and the new Siri: * Where possible, AI processing is done on device * The first fallback is to Apple's own Private Cloud Compute (PCC) servers * Gemini models operating with equivalent PCC protections are the last resort The highly sophisticated PCC approach means that absolutely no data is accessible by Apple or Google, nor is it retained. Apple has designed the security architecture such that this claim can be independently verified by security researchers.

Claude chats showed up in Google Search. Here's how to keep yours private

Users can protect their privacy by reviewing and revoking public access to shared Claude chats in their settings. Detailed instructions are provided below. It's one thing for ChatGPT, Claude, or Gemini to train their models on the data we give them, or for AI chatbots to store memories of our conversations for future reference. But having our AI chats appear publicly on Google Search? That's not something any of us bargained for. Yet that's exactly what happened to some unfortunate Claude users, who learned their Claude conversations were popping up in Google's search results for those using the proper search phrase. Those exposed Claude chats have since disappeared from Google Search. Still, it's unnerving that Claude exchanges showed up on Google in the first place -- and, in fact, it's not the first time it's happened. The "good" news about this Claude incident is that it involved only shared Claude chats. That is, Claude conversations that you've specifically made available to others via a public link. The same goes for shared artifacts (i.e., Claude-created documents, code snippets, or other content that appears in a pane next to the chat). To share a Claude chat or artifact, you need to click the curved forward arrow in the top-right corner of the Claude Desktop interface. A pop-up window will give you two options: "Keep private" or "Create public link," with the latter option producing a URL that allows anyone who clicks it to view the conversation in full. Creating a public link for a Claude chat doesn't automatically make it pop up on Google, but it does appear to be the first step toward that type of exposure actually happening. In a statement to TechCrunch, an Anthropic spokesperson said it doesn't "share chat directories or sitemaps with search engines like Google," adding that the shared links can't be found "unless people choose to share them themselves," such as in a social post, at which point they "may be archived by third-party services." One way or another, thousands of shared Claude posts did wind up in Google's search results, exposing all kinds of sensitive Claude discussions, including chats about crypto wallets with the keys in plain view, a lawyer asking whether he should self-report an ethics violation, and a fair amount of eyebrow-raising erotica. Those Claude chats have since disappeared from Google, suggesting Anthropic took steps to block Google bots from crawling shared Claude links. In any event, the best way to keep your Claude chats private -- and your ChatGPT or Gemini conversations, for that matter -- is to exercise caution when sharing them. A good rule of thumb, which also applies to anything you write in an email or a social post, is to ask yourself whether you'd be comfortable putting the content you're sharing on the back of a postcard. If not, don't share it. (Or share using a method that's more secure than a public URL.) To check whether you've previously shared any Claude conversations or artifacts, navigate to Claude's Settings menu, select Privacy, then click on "Shared chats" or "Shared artifacts." From there, you can see which conversations/artifacts you've shared and also make them private again.

I just learned your Claude AI chats could show up in Google -- here's how to check yours

Reviewing your conversations only takes a minute, but it can make all the difference in keeping your chats private I'm a big fan of the "Share" feature in Claude. I use it all the time to share Skills, Artifacts and conversations, mostly. But now I'm going to think twice before sharing. Over the weekend, security researchers and Reddit users discovered that hundreds of publicly shared Claude conversations could be found using Google search operators like site:claude.ai/share. The issue only affected chats that users had intentionally shared using Claude's public sharing feature -- private conversations that were never shared were not exposed. Still, the discovery caught many users by surprise because the conversations were turning up in ordinary search results, making them far easier to find than many people expected. What happened? Claude lets you generate a public link to a conversation so you can share it with someone else. That feature creates a snapshot of the chat at the moment you click Share. Anthropic's documentation notes that "anyone with the link can view the chat snapshot." The problem wasn't that private conversations suddenly became public, but that it was that some of those public links were indexed by search engines after they were discovered elsewhere on the web. Researchers who examined the indexed pages reported finding everything from software debugging sessions and internal business discussions to resumes, API keys, crypto wallet information and legal research. While those conversations had been intentionally shared at some point, many users appeared to assume the links functioned more like unlisted documents than publicly searchable web pages. By Monday, many of the indexed results had already disappeared from Google Search, suggesting the pages were being removed from search results or changes had been made to prevent further indexing. Should you be worried? If you've never used Claude's Share feature, this issue doesn't affect you. Likewise, chats that remained private inside your Claude account were not exposed. However, if you've shared conversations in the past -- especially ones containing work documents, personal information, code or anything confidential, it's worth checking which links are still active. Even if a page no longer appears in Google Search, anyone who already has the shared URL can still access that conversation until you remove the share. How to check your shared Claude chats You can view your shared conversations by signing in to your Claude account: Open Settings. Select Privacy. Click Shared Chats. Review your active shared links and delete any you no longer want to be public. If a conversation contains sensitive information, removing the share link immediately revokes public access. A good reminder for every AI chatbot This isn't the first time an AI company's sharing feature has raised privacy concerns. Similar issues have surfaced before with ChatGPT as users increasingly treat AI assistants like private notebooks, only to discover that sharing a conversation creates a public webpage rather than a private collaboration link. Whether you're using Claude, ChatGPT or another AI assistant, it's worth assuming that anything you intentionally publish with a share link could eventually be discovered by someone else. Before clicking Share, take a moment to make sure the conversation doesn't include passwords, API keys, financial information, customer data or anything you'd be uncomfortable seeing on the open web. Follow Tom's Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds. Subscribe to Tom's Guide on YouTube and follow us on TikTok. Finally, you can visit our dedicated Tom's Guide Savings Squad hub for expert help on getting the best products for less.

Your public Claude app may be searchable on Google

Why it matters: Most Claude users likely don't expect that the tools they're sharing with friends, coworkers or other intended recipients could be discoverable through the world's most popular search engine. The big picture: Claude is the latest AI chatbot to raise questions about how public AI-generated content is handled by search engines, following similar scrutiny over ChatGPT conversations. * In June 2025, users shared conversations with Meta's AI chatbots, including text conversations, audio clips and images they'd created on a public feed, seemingly by accident. Driving the news: Over the weekend, users on Reddit and X began warning that they could easily use Google to find Claude conversations and artifacts -- apps, documents, spreadsheets, web pages and other files created with Claude. * As of Monday afternoon, Axios was still able to find publicly shared Claude artifacts indexed on Google, but not Claude conversations people had with the chatbot. How it works: Claude conversations and artifacts are private by default, but users can choose to generate a public link to share either one with others. * Those conversations could include sensitive and private information. What they're saying: An Anthropic spokesperson said in a statement that the company does not "share chat directories or sitemaps with search engines like Google." * "These shareable links are not guessable or discoverable unless people choose to share them themselves," the spokesperson said. "When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." * Anthropic added that these chats and artifacts are only searchable on third-party search engines after they've been shared somewhere a search engine can see -- such as a discussion forum or social media. Zoom in: Indexed Claude artifacts viewed by Axios on Monday included an apparent plan opposing the dissolution of a Miami city agency that oversees park management and another document about changes to a university's academic calendar. * Other indexed artifacts included business plans, infrastructure diagrams explaining multi-cloud environments and planning documents describing how a clinical trial could be conducted. * Axios could not immediately verify who created each artifact and whether the artifacts included legitimate information. The bottom line: A feature designed for sharing can become a privacy risk when users treat a public link as a private handoff.

Shared a Claude conversation? Google may have seen it.

Shared Claude chats were publicly accessible through Google Search. Credit: Avishek Das/SOPA Images/LightRocket via Getty Images If you've used Anthropic's AI chatbot Claude, and shared any of your Claude conversations with friends, those chats may have been publicly available via Google. That's what emerged this weekend when Reddit users noticed that shared Claude conversations were being indexed by Google Search. Seemingly private conversations between users and the AI chatbot, in other words, were publicly searchable on Google. According to Reddit, those affected included a Claude user who was creating a crypto wallet and accidentally exposed keys to the currency, and a lawyer asking the chatbot for legal advice on whether they had to self-report a breach of conduct. Anthropic has since addressed the issue. Google appears to have de-indexed and removed all shared Claude conversations from its search engine as of this writing. How did this happen? By default, Claude conversations are private. However, there is a feature which lets users share specific Claude chats. When doing this, Anthropic creates a static page that allows users to share the chat with others -- and also made it indexable by search engines. Simple "noindex" tags can be included in a web page's code, telling search engines not to index a page. It does not appear that Anthropic used those tags. That means each shared Claude conversation had the potential to be indexed by Google. Reddit users were able to find shared Claude conversations by searching for "site:claude.ai/share." This query would pull up all indexed pages using that URL structure, which every shared Claude conversation utilized. Does AI have a privacy problem? The shared Claude chats have since been removed from Google. But this isn't the first time we've seen insecure AI chatbot conversations. Last year, ChatGPT users experienced the same issue; their shared conversations were also being indexed by Google. OpenAI pulled the feature once users began finding shared conversations in Google Search. The same thing happened with Claude before too. Just one month after the ChatGPT incident, shared Claude conversations were discovered in Google Search. Anthropic was able to remove them from Google and addressed the issue at the time, saying it had blocked search engine crawlers. Yet it seems shared Claude chats were still being indexed. Mashable has reached out to Anthropic for more information, and we will update this piece if we hear back. How can I check privacy on my Claude conversations? If you've never shared a Claude conversation, you have no need to worry. This wasn't a leak of private conversations, which is what all Claude chats are by default. The issue affected only shared Claude chats. If you have shared Claude chats, then there's a chance your conversation was publicly available via Google Search. To manage that feature, simply login to your Claude account, go to Settings, followed by Privacy, then Shared Chats, and click on Manage. You should see a list of all your shared chats, and sharing can be turned off for all of them.

Uh-oh: Some Claude shared conversations and Artifacts appear to be indexed and publicly accessible on Google Search

Over the weekend, Reddit user -void1 posted an alarming discovery on the r/ClaudeAI subreddit: some conversations that users of Anthropic's Claude AI chatbot had made "shareable" via a link were being indexed by Google Search, and could be clicked on and accessed by seemingly anyone. The conversation took off on the social networks X and Reddit, the latter with thousands of upvotes and comments, many expressing concern about user privacy and information security, and the additional finding by users that shared Claude Artifacts -- including interactive applications, dashboards, documents and other AI-generated work products -- were also appearing in Google Search results. VentureBeat independently verified that some Claude Artifacts not shared directly with us were indeed searchable and accessible via Google. We could not access any shared conversations. By Sunday morning, many of the original Google search results for shared Claude conversations appeared to have disappeared or become significantly harder to find, suggesting either Google, Anthropic or both had begun taking action. The exposure could carry broader implications for enterprise users. Anthropic has increasingly positioned the feature as a collaborative workspace for building and sharing software, dashboards, documents and other business assets rather than simply chatbot responses. I have reached out to Anthropic for comment and will update this article when the company responds. A simple Google search yields a trove of Claude conversations Reddit user -void1 posted to r/ClaudeAI on July 25, 2026, demonstrating that the Google query surfaced numerous publicly accessible Claude conversations. Screenshots shared across Reddit and X showed Google returning pages from Claude's URLs, while other users reported finding conversations containing cryptocurrency wallet creation, legal questions, résumés and internal business discussions. While many users expressed concern that conversations they believed were effectively "unlisted" could become discoverable through public search engines, others argued the behavior reflected the expected consequences of creating publicly accessible share links rather than a software vulnerability. Why the exposure of Claude Artifacts may be even more concerning On July 26, X user Om Patel, founder of research firm BigIdeasDB, posted allegingthat searches such as surfaced publicly shared applications, dashboards, reports and documents. Screenshots circulating online appeared to show search results referencing internal-looking proposal documents and other business materials. Another widely circulated post warned that users often interpret "Anyone with the link" as equivalent to an unlisted YouTube video -- accessible only if someone possesses the URL -- not necessarily as content eligible for indexing by public search engines. VentureBeat independently verified that multiple third-party Claude Artifacts appeared in Google Search results for the query and were accessible without authentication, despite the URLs not being previously known to the reporter. However, VentureBeat has not independently verified the full volume or representativeness of the examples circulating on social media. The reports are particularly significant because Artifacts has become one of Anthropic's flagship product initiatives. First introduced alongside Claude 3.5 Sonnet in June 2024, Artifacts transformed Claude from a conventional chatbot into a collaborative workspace capable of generating interactive web applications, dashboards, visualizations, documents, games and other live software alongside a conversation. VentureBeat previously described the launch as potentially marking the beginning of an "interface war" among AI companies, shifting competition from raw model performance toward collaborative AI workspaces. Anthropic subsequently rolled Artifacts out to all Claude users, saying tens of millions had already been created, before expanding the concept again this year into Claude Code. That update allows engineering teams to publish live HTML dashboards and interactive project workspaces directly from coding sessions, making Artifacts an increasingly important part of Anthropic's enterprise strategy. That broader functionality raises the potential stakes if publicly shared Artifacts were also being indexed. Unlike ordinary chat transcripts, Artifacts can contain interactive software prototypes, engineering dashboards, planning documents, product mockups, data visualizations and other work products organizations increasingly rely on to collaborate across technical and business teams. If those pages become searchable through public search engines, the exposure could extend well beyond conversational text. A reality check on privacy, information security and the open web Importantly, nothing so far suggests attackers gained access to private Claude accounts or conversations. Rather, the controversy centers on conversations and Artifacts that users explicitly chose to share publicly via Claude's sharing tools. The dispute instead is whether users reasonably understood those shared pages could become discoverable through public search engines rather than only by recipients possessing the link. Technically, pages that are publicly accessible without authentication can generally be indexed by search engines unless publishers explicitly prevent crawling through mechanisms such as directives or other indexing controls. Several Reddit commenters noted that Claude's long, randomly generated share URLs are effectively impossible to guess. Instead, search engines typically discover them only after links appear somewhere they are permitted to crawl, such as public websites, forums or social media posts. Others questioned exactly how Google initially discovered so many Claude share URLs. The issue also illustrates a growing challenge for AI companies as chatbots evolve into collaborative workspaces for creating software, documents, dashboards and business applications. Features originally designed to make sharing AI-generated work easier now increasingly expose assets that may carry significantly more business value than a simple conversation. As enterprises adopt AI as a platform for building internal tools and workflows, the distinction between "shared by link" and "publicly discoverable through search" becomes far more consequential. A recurring challenge for AI companies Anthropic is far from the first AI company to confront the distinction between "shared" and "searchable." Reddit users quickly pointed out that OpenAI previously faced criticism after publicly shared ChatGPT conversations became discoverable through Google, prompting similar debates over whether "share by link" should imply a publicly indexed webpage or something closer to an unlisted document. Anthropic's situation also echoes an incident involving Google's pre-Gemini AI assistant, Bard, in September 2023. SEO consultant Gagan Ghotra discovered that Google Search had begun indexing shared Bard conversation links, warning that users could mistakenly assume they were sharing conversations only with intended recipients rather than making them discoverable through search. Google later responded publicly that it did not intend for shared Bard chats to be indexed and said it was working to block them from Google Search while emphasizing that only conversations users explicitly chose to share were affected. Together, the Bard, ChatGPT and now Claude episodes suggest AI companies continue to wrestle with the boundary between content that is technically public on the web and users' expectations that "share with a link" behaves more like an unlisted Google Doc or YouTube video than a webpage eligible for indexing by search engines. What enterprises should do now For organizations deploying generative AI broadly across employees, the distinction between "shared with a link" and "publicly discoverable through search" is not merely semantic. It can determine whether an internal engineering dashboard, financial model, product roadmap, customer-facing prototype or AI-generated application remains effectively private -- or becomes visible to anyone using a search engine. Whether this ultimately proves to be a technical indexing oversight, a mismatch between product design and user expectations, or some combination of both, the episode serves as another reminder that AI products are increasingly functioning less like chatbots and more like collaborative operating systems for knowledge work. As those platforms begin hosting internal dashboards, software prototypes, financial analyses, business planning documents and increasingly sophisticated enterprise applications, seemingly small decisions about how shared links behave can have outsized consequences for enterprise security, product design and user trust. Enterprise leaders should consider taking several practical steps: For now, it appears Anthropic has begun limiting the visibility of at least some shared pages in Google Search, though reports suggest cached copies, archived pages and indexing by other search engines may persist for some content. Enterprises that have relied on Claude's sharing features may wish to review existing shared conversations and Artifacts while Anthropic's investigation continues.

That Claude chat you shared? Google may have seen it too

Public chat links were indexed by Google, potentially exposing sensitive information shared with the AI. If you've ever shared a Claude conversation using a public link, it might be worth checking your privacy settings. Over the weekend, users discovered that publicly shared Claude chats and Artifacts were appearing in Google Search and other search engines through queries such as site:claude.ai/share. The indexed pages reportedly included everything from resumes and business documents to API keys, health information, and other sensitive conversations that users likely never expected to become searchable. How did this happen? Importantly, this wasn't the result of a hack or data breach. Instead, the conversations were shared using Claude's built-in Share feature. Claude allows users to generate a public share link, creating a snapshot of a conversation that anyone with the URL can access. That snapshot also includes any Artifacts such as interactive documents, apps, or code generated during the conversation. While the feature is intended for collaboration, users discovered that some of these public pages had also been indexed by search engines, making them discoverable through simple Google searches. The issue first gained traction after Reddit users noticed hundreds of searchable Claude conversations over the weekend. Reports suggest that many users assumed "anyone with the link" meant the content wouldn't appear in search results unless someone explicitly shared the URL with them, leading to understandable confusion once Google indexing came to light. What Anthropic and Google are saying Anthropic says the behavior wasn't the result of a bug or data breach, but rather how its sharing feature is designed to work. The company told TechCrunch that Claude chats remain private by default, and it doesn't publish chat directories or sitemaps for search engines. However, if a user shares a public Claude link on a website, forum, or social platform that can be crawled, search engines may index it like any other publicly accessible webpage. The company's Privacy Center also states that shared chats create a public snapshot of the conversation, including any Artifacts generated before the link was created. Users can revoke access at any time by heading to Settings > Privacy > Shared Chats and unsharing the conversation. That said, previously indexed pages may continue to appear in search results or cached archives until they're refreshed. Recommended Videos Google, meanwhile, says the responsibility lies with the website hosting the content. In a statement to TechCrunch, spokesperson Ned Adriance said search engines don't decide which pages are made public, noting that Google provides website owners with controls to prevent crawling or indexing and respects those directives. The incident serves as a timely reminder that once content is made publicly accessible on the web, it can often be treated like any other webpage -- even if it started as a private AI conversation.

Users seemingly private conversations with Anthropic's Claude showed up in Google search results | Fortune

A trove of seemingly private conversations with Anthropic's Claude chatbot turned up in public Google search results last weekend. Some of the conversations reportedly included sensitive information like cryptocurrency wallet keys and personal details such as names and addresses. The problem affected chats where users had made use of Claude's "share" feature -- which people typically use to send a record of a conversation to another person. The issue surfaced over the weekend, when members of a discussion channel about Claude on the social media site Reddit found that typing a specific search phrase into Google would pull up a long list of shared Claude conversations. Claude's Artifacts -- interactive tools and mini apps people build inside Claude -- also appeared in results. The topics of the seemingly inadvertently exposed chats ranged from erotica, programming chats, work notes, and fake book reviews. One chat -- which was labeled as "shared by Anthropic" -- showed Claude generating explicit content, which goes against Anthropic's policy on erotica. "We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google," an Anthropic spokesperson told Fortune. "These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." The company does appear to have fixed the issue, as the links are no longer available via Google through the technique shared on Reddit. Still, at the time of writing, many of the previously exposed chat links remained live and reachable to those already with the link. Claude conversations are private by default -- the only chats affected were those that users had "shared" with someone else. Claude's share button works the way most competitors' do: when users select it, Claude creates a snapshot of your conversation at its own web address, meant to be sent to one person or a small group with that link. The links do not give anyone access to a user's full account or all chats that a user has engaged in. It's not the first time Claude chats have found their way into public Google searches. According to Forbes, the same type of problem affected the company last year, and a nearly identical issue exposed almost 100,000 ChatGPT conversations on Google. Elon Musk's Grok chatbot has also been affected by the same problem in the past. This is because the "share" feature on AI chatbots creates a unique URL for the conversation, and these links were automatically published and left open to search engines, often without users' knowledge. As users increasingly share sensitive information with chatbots, incidents like these risk exposing massive amounts of private data and information. Shared chats are typically more sensitive than things like a shared document, as people treat chatbots as a place to think out loud about work, health, and legal problems in a way they wouldn't necessarily want made public. The fact that OpenAI, Anthropic, and xAI have each stumbled into versions of the same mistake also suggests its problem the industry has struggled to permanently fix.

How to Make Sure Your Claude Chats Don't Get Shared Publicly (Again)

It seems only shared Claude chats were affected in this case, so the solution is to delete those shared snapshots and disable the public links. If you use Claude, Anthropic's AI chatbot, you might be aware that your chats may have been exposed on Google. The news broke over the weekend, as Redditors discovered a treasure trove of conversations between Claude users and their AI bots. All one had to do was search for a keyword followed by "site:claude.ai/share" to find Claude conversations about that topic. It was, to be frank, quite the mess. Luckily, Anthropic quickly plugged the security hole. Ever since, searching Google with "site:claude.ai/share" returns no results, so you can't find any of these chats today if you try. However, it's not necessarily a huge comfort to know that Google indexed these conversations in the first place -- and for the second time in a year, at that. Anthropic dealt with a similar situation back in September, and while it isn't alone -- Google once also indexed ChatGPT conversations -- you might understandably be concerned about future chats leaking onto the web, as well as wonder whether your current chats were exposed. Why were Claude chats exposed? The thing is, it doesn't seem like every Claude chat had an equal risk of exposure here. Anthropic is adamant it doesn't share chat links to Google directly; instead, the vast majority (if not the entirety) of these chats appear to be conversations that individuals decided to share with others on the open web, according to Google. Claude lets you share your chats publicly if you wish, and while that can be convenient for showing friends, family, or colleagues a specific discussion, it might also open up your chat to Google's web crawlers, as when you share a chat, it generates a public link. So, there's a silver lining in that private Claude chats that weren't shared are unlikely to be involved in this latest exposure. If you don't share your chats with anyone, you should be in the clear -- though Futurism did report that one user in September's Claude debacle swears they never shared their exposed chats. However, if you do share Claude chats, your conversations might have been part of the indexing that happened over the weekend. Further complicating things, it seems that Claude's "artifacts" are still visible on Google. Claude generates artifacts when the content of your project meets certain criteria, and can include anything like documents, code snippets, HTML sites, SVG images, diagrams, flowcharts, and Interactive React components. In many cases, users may want these artifacts to be public, as they may be meant to be shared widely. However, if you don't want your artifacts indexed on Google, you'll have to take action. How to protect your Claude chats from future exposure While there doesn't appear to be any reliable way to identify whether your chats and artifacts were included in this exposure, you can ensure that none of them are ever indexed by a search engine in the future. To do so, you'll essentially have to shut down sharing. To start, head to Settings > Privacy in Claude, then choose "Manage" next to "Shared chats." Once this new page appears, you'll see all shared chats, including a link to the conversation and the date shared. From here, scroll through the list and select "Unshare" next to each chat you'd like to remove. This won't delete your chats; only their snapshots connected to these public links.

Claude users' shared conversations were showing up in Google searches

Thousands of conversations between Claude and its users, alongside tools created during those chats, were available for a period of time through Google searches earlier this month -- echoing a similar issue that blighted OpenAI's ChatGPT and was first reported by Fast Company almost a year ago to the day. Among the conversations available through a simple Google search that has now been fixed were purportedly those involving sexting and one where an engineer is launching "a project meant to train future Security Engineers in Web/Cloud/AI Security." Redditors spent large parts of the weekend uncovering embarrassing or potentially private conversations, but Anthropic appears to have delisted the results from Google over the weekend. "This is wild to see," says Rachel Tobac, a cybersecurity analyst and CEO of SocialProof Security. "It's the exact issue we talked about before." In July 2025, Fast Company exclusively revealed a similar issue with ChatGPT that OpenAI initially suggested was not significant because the information that chats shared when a checkbox was ticked could be indexed by search engines was presented in smaller, lighter text in a popup. It then pulled the ability to opt in to allowing chats to be indexed by search engines within a week.

Anthropic responds after Claude conversations appeared in Google Search results

Users of Claude should be concerned, as a treasure trove of share links has appeared in public search results, raising fresh and very warranted concerns around conversation privacy with AI models. The spotlight was put on Anthropic's Claude over the weekend after a Reddit post gained significant traction on the r/ClaudeAI subreddit. The post showed a screenshot of a Google Search result with the following in the text box, "site:claude.ai/share," and below it a bunch of clickable conversations with Claude. For those who don't know, Claude can create publicly shareable links of conversations, which enable users to share conversations between each other, which can be for various purposes such as sharing ongoing software development, brainstorming sessions, designs, and more. According to the Reddit post, these publicly shareable conversations contain "noindex" tags, which is a standard instruction website owners can give to search engines informing them they can visit the page, but cannot list it in search results. Typically, Google, Bing, and other search engines honor this request. Notably, if the page has "noindex," it is still reachable if you know the specific URL. However, it appears not all of the Claude conversations contained "noindex" before being indexed by Google, as now those links have surfaced on social media platforms and the conversations have been exposed. The exposed chats covered topics such as legal strategy discussions from lawyers, technical troubleshooting, personal conversations of a sexually provocative nature, and other personal and sensitive user conversations. The good news is, many of these links have since been removed from Google Search, and attempting to use the "site:claude.ai/share" search query now produces zero results. While the problem seems to have been solved, its initial existence highlights a rapidly concerning aspect of sophisticated AI reliance and the convenience it offers at the potential cost of privacy violations.

Your Claude Chats May Have Been Exposed on Google

This is the second time this has happened with Claude chats, though ChatGPT had a similar incident last August. Chatbots are designed to make you feel like your conversations are personal. They're highly agreeable, and over-friendly, and simulate the experience of chatting with a friend online -- assuming that friend can instantly generate a wall of text in a few seconds. In reality, however, they're far from personal, especially if your definition of "personal" includes "for your eyes only." Claude chats were visible on Google this weekend Some Claude users can attest to that fact after the weekend. As Cyber Security News reports, Anthropic's Claude share links have appeared in Google search results, indicating search engines like Google have indexed users' chats. Over the weekend, a viral Reddit post highlighted how, by simply adding "site:claude.ai/share" to your search queries, you could pull up real Claude chats directly in Google. If a Claude user talked about the keyword you searched, and Google indexed that conversation, you could pull it up and read the transcript. According to Cyber Security News, that included lawyers discussing legal strategies, engineers talking through technical issues, and users being open with their personal problems. Depending on the conversation, that could range from mildly embarrassing to downright mortifying. Now, some caveats: Anthropic quickly nipped the issue in the bud after the Reddit thread started making waves. If you try to search anything with "site:claude.ai/share" now, you'll simply receive a failed search result in return, so all your Claude chats should be safe going forward. Perhaps most importantly, it doesn't seem likely that these indexed chats affected everyone who uses Claude; rather, these were "share links," which Claude generates when you share a conversation with someone else. The glitch appears to stem from this feature -- if you shared a chat from Claude, it may have ended up in this searchable database. That said, not all the leaked chats might have fit that criteria. This same situation happened back in September, and, as Futurism reports, at least one affected user denied sharing their chats. Taken at their word, it's possible that some exposed Claude chats were also from users who never used the share chat function. AI chats aren't private Even if you're confident your Claude chats weren't shared, or trust that the leak has been plugged, that doesn't mean that your AI chatbot conversations should be treated with an assumption of privacy. Even if you never shared a conversation from Claude, and thus likely weren't affected by this issue, your chats may not be contained within your account. While you might think what you say with your AI stays between you and the chatbot, everything you say to your bot is shared with Anthropic and used to train future models -- unless you explicitly opt out. That's not just Anthropic: Most, if not all, AI companies operate this way, and each has its own set of policies. Some may have humans directly reviewing your chats, for example -- something you might not think about when asking your AI bot for help with a personal issue. Even if you opt out of data training, the company in question may still hold onto your chats for a set period of time. Anthropic, for example, will hold onto your chat data for 30 days after you delete the conversation. So not only is that data held on Anthropic servers in the first place, it lives there after you can no longer access it. Plus, Anthropic isn't the only company dealing with indexing exposure: While this is the second time this happened to Claude users, ChatGPT users dealt with a similar problem last August. If you do choose to use chatbots, never share personal or private information with them -- especially highly sensitive data like health info. AI is undoubtedly here to stay, and many find it useful, but if you care about your privacy, these tools simply don't have your best interests in mind.

Claude Artifacts Reportedly Remain Searchable on Google, Raising Privacy Concerns

Third-party sites reportedly archived shared Claude content Claude users are facing renewed privacy concerns after publicly shared Artifacts created with the AI chatbot were found through Google Search, raising questions about how the platform handles content shared using public links. Reports indicate that while shared conversations have largely disappeared from Google's search results, some publicly shared apps, documents, spreadsheets, dashboards, and other AI-generated content remain searchable. The development has drawn attention to how publicly shared AI content can become more widely accessible than some users may expect. Claude Users Warned as Shared Artifacts Continue to Appear on Google According to a report by Axios, publicly shared Claude Artifacts continued to appear in Google Search as of Monday, even though shared Claude conversations were no longer visible in Google's results. Over the weekend, users on Reddit and X reported that both conversations and Artifacts generated with Claude could be discovered through search engines after they had been shared using public links. Wired reported that some Claude share pages did not include the noindex metadata that search engines recommend for preventing individual webpages from being indexed. The publication noted that Anthropic uses a robots.txt file to discourage web crawlers from accessing shared conversations. Still, Google and Bing recommend using page-level noindex instructions because robots.txt alone may not stop pages from appearing in search results. Anthropic reportedly said Claude conversations and Artifacts are private by default and only become publicly accessible when users generate a shareable link. The company also said it does not provide search engines with chat directories or sitemaps and that search engines can only index shared pages after those links appear somewhere they can crawl, such as websites or social media posts. Posts by X claimed that searchable pages included personal conversations, resumes, legal documents, engineering project details, financial spreadsheets, customer information, contracts, medical records, and other sensitive material. Patel also said some third-party websites had begun collecting publicly shared Claude content, potentially extending its availability beyond search engine results. The reports follow similar concerns previously raised about public-sharing features on other AI platforms. Users who have shared Claude conversations or Artifacts can review and remove those links from the Shared Chats section of the Privacy settings.

Claude AI Chats Leaked: Your private conversation with AI might be on Google right now. Here's what you should do

Users discovered personal conversations from Claude chatbots appearing in Google searches. These shared links, intended for private sharing, became publicly accessible. Anthropic stated that shared links function like any public webpage. This issue has previously affected other AI chatbots like ChatGPT and Grok. Users are advised to avoid sharing sensitive data and to review past shared links. If you've ever typed something deeply personal into an AI chatbot thinking it was just between you and the machine, this story is worth your attention. Over the past week, users of Anthropic's Claude discovered something unsettling: conversations they believed were private had turned up in ordinary Google searches. Not obscure, hard-to-find pages, plain search results that anyone could stumble onto. And the contents weren't harmless small talk. Reports point to cryptocurrency wallet keys, home addresses, résumés with real names and phone numbers, and even tax-related documents sitting out in the open. How Claude AI Private Chats Ended Up PublicThe trouble traces back to a feature most Claude users have probably used at some point, the "share" button, which lets someone generate a link to send a conversation to a colleague or friend. It sounds harmless enough. The catch is that once that link exists, it behaves like any other public webpage: search engines can crawl it, index it, and serve it up to anyone typing the right query. Also Read: 'Americans eating like': Rynair mocks US eating habits, shares viral video of a girl dipping butter in cola drink According to posts that circulated on Reddit, simply searching a specific phrase on Google was enough to surface a long list of these shared Claude chats, along with "Artifacts," the mini apps and interactive tools people build inside Claude. One user with a sizeable following on X reportedly went further, saying he'd found not just chats but shared workspaces containing financial records, legal drafts, and health information baked into these artifacts. Anthropic's Responds to Claude AI Chat Leaks AllegationsAnthropic pushed back on the idea that it was actively feeding these conversations to search engines. The company's position, relayed to reporters, is essentially this: it doesn't hand chat directories or sitemaps to Google, and share links aren't something people could stumble upon by guessing a URL. In the company's telling, the responsibility shifts once a person actively chooses to share a link, at that point, it says, the content is functioning like any other public web page, which means it can legitimately be picked up and archived by outside services. Critics weren't entirely convinced by that framing. Their argument is simpler: if a "share" button doesn't warn users clearly that their conversation could end up searchable by literally anyone, most people will never think to protect themselves. This Isn't Anthropic's First TimeWhat makes this episode sting more is that it isn't new. Roughly a year ago, a similar flaw led to hundreds of Claude chats getting indexed, forcing Anthropic to scrub them from the web. The company doesn't stand alone here, either, OpenAI's ChatGPT faced almost the exact same problem, with tens of thousands of shared conversations turning searchable overnight, and Elon Musk's Grok chatbot has run into comparable trouble too. The common thread across all three: a "share" or "public link" feature that quietly forgets to tell search engines to stay out. Anthropic says it has since removed the exposed links from Google's index. But there's an important caveat, anyone who already saved, bookmarked, or forwarded one of those links before the fix may still be able to open it. Removing a page from search results doesn't necessarily kill the page itself. Why This Should Worry You, Even If You've Never Used ClaudePeople don't talk to AI chatbots the way they write emails or documents. There's a tendency to think out loud, venting about a health scare, drafting a legal complaint, pasting in a private contract to get a second opinion, or troubleshooting code tied to a company's internal systems. Security researchers point out that this makes leaked AI chats potentially more revealing than a leaked folder of files, simply because people are less guarded when they're "just asking a question." What You Can Do Until AI companies build sharper safeguards, proper no-index tags, expiring links, or login walls on shared content, treat any "share" button on an AI tool the same way you'd treat posting something on the open internet. A few practical habits: Also Read: Pyrocumulonimbus: France-Spain wildfires are creating rare 'fire clouds' that spark their own lightning Avoid pasting sensitive details, wallet keys, ID numbers, medical records, into any chatbot, shared or not. If you've ever used Claude's share feature, revisit your shared links and delete ones you no longer need active. Search your own name or unique phrases from past chats on Google occasionally, just to check nothing of yours slipped through. The bigger lesson here isn't really about Claude specifically, it's a reminder that "private" and "shared" are two very different things once an AI tool is involved, and the industry hasn't fully caught up to that yet.

Claude AI Chat Links Appear in Google Search Results

Some shared Claude AI conversations appeared in Google and Bing search results after public links were indexed, raising new concerns about user privacy. Recently, a report shared evidence that personal conversations through Claude AI links appeared in Google and Bing search results. Internet users discovered that certain could be located through simple search engine queries, and a Reddit post brought the issue to light. The leaked chats were reportedly covering a wide range of topics, including political advice, legal questions, and personal discussions. Claude AI has a feature that lets users generate public links for their conversations and share them with friends or family. Though Anthropic claimed that it had instructed the Google Crawler not to index those shared pages through its robots.txt file, experts have noted that robots.txt alone does not always prevent pages from appearing in search results. Regarding this entire issue, a Claude AI spokesperson stated, "Shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services." Both Google and Bing have stated that website operators should also use a 'noindex' tag if they want to stop pages from being included in search listings, and the analysts opined that the leaked didn't have that additional security. On this point, Glenn Gabe, an SEO and AI search consultant at G-Squared Interactive, stated, "If you block Google or Bing from crawling your content, they can still index those URLs, just without crawling the content." Thus, even 'noindexing' sometimes doesn't prevent these chat leaks.

Claude AI Users Beware: Public Share Links May Not Be as Private as You Think

What happened with Claude AI shared chats? Claude AI recently came under scrutiny after some conversations shared using its Share Chat feature became discoverable through Google search results. The issue affected only chats that users intentionally made public by generating shareable links. Anthropic clarified that private conversations stored within user accounts were not exposed or compromised. Were private Claude AI conversations exposed? No. According to Anthropic, private Claude AI conversations remained secure throughout the incident. Only conversations that users deliberately shared through publicly accessible URLs had the potential to be indexed by search engines. There is currently no evidence suggesting unauthorized access to private chats or user accounts. Why did Google index Claude AI shared chats? Search engines like Google routinely crawl and index publicly accessible webpages unless website owners explicitly prevent indexing using technical measures such as noindex directives or robots.txt configurations. Since Claude's shared conversations were published as public webpages, some of those URLs became eligible for indexing and eventually appeared in search results. How can I protect my Claude AI conversations? The safest approach is to treat every public share link as though it could eventually be viewed by anyone. Before sharing, remove personal information, financial details, passwords, API keys, customer data, confidential business documents, or any proprietary information. Regularly review and delete public links that are no longer necessary. Should I stop using Claude AI's Share Chat feature? Not necessarily. The Share Chat feature remains useful for collaboration, education, documentation, and knowledge sharing. However, users should only share conversations that are appropriate for public viewing. If a discussion contains confidential or sensitive information, it is best to avoid generating a public link altogether.

Your private chats with Claude could be on Google right now: how to avoid it

Public Claude share links may be indexed if posted on crawlable pages A certain number of Claude conversations and Artifacts are showing up among Google results, as reported in Fortune. Discovered over this past weekend, the situation once again raises the question of how exposed public links to our conversations with Anthropic's AI can become, especially when they contain work documents, medical data, or personal information. A public link that can expose too much Claude lets us create a link so that anyone can view a given conversation or project. That option is meant to send it to coworkers, friends, or family, although, apparently, as a public page it can also end up being indexed. Something similar to what already happened with ChatGPT conversations that ended up visible on Google. Anthropic says it keeps this type of link from being indexed by search engines and that the links appear only when users themselves publish them in crawlable places. Google, meanwhile, reminds us that it offers controls to prevent the indexing of certain types of links. While both sides try to reduce their responsibilities, the truth is that private content was left easy to find with simple searches, including medical reports, internal documents, and minors' data. How to check our public chats in Claude We can review the links from Settings > Privacy > Shared Chats and remove those we no longer want to share. It's also worth applying some rules to protect our private data and reviewing some ChatGPT privacy settings. Events like this weekend's remind us of the importance of understanding what happens to our information when using a service.A public link should be treated the same as publishing that content on a public web page.

Thousands of Claude chats are showing up in Google Search: Here's how to protect your privacy

Avoid sharing chats containing personal, financial, or confidential information to protect your privacy. Claude is one of the most widely used AI tools for writing code, planning businesses, brainstorming ideas, and even discussing personal matters. However, a recent post has put Anthropic's AI chatbot under scrutiny. The post claims that conversations shared through Claude can be discovered via Google Search using a simple search query. If true, then it's a big privacy concern, as the chats could contain sensitive pieces of code or the personal matters of the users. The company is yet to say anything on the matter. Follow along with the article to learn how you can safeguard your shared Claude chats. According to a post shared by Vaibhav Sisinty on his official X platform, when he searched 'site:claude.ai/share' on Google, it revealed a large number of publicly shared Claude conversations. These pages include coding projects, business ideas, research notes, creative writing, and other AI-generated work. He further added that when users click the Share button in Claude, the platform creates a public webpage that anyone with the link can access. If search engines are allowed to crawl that page, it can also become searchable on Google. While some users intentionally share conversations with colleagues or friends, others may not realise that these pages could later appear in search results. Also read: Sam Altman to brief US government on OpenAI 's next AI model before public release: Report Sisinty also clarified that some of these chats are intentionally shared online, while many users are likely unaware that their shared conversations can end up being publicly indexed. Do note that not all conversations between users in Claude are getting indexed on Google. The search engine decides which pages to index. Thus, many of those shared may never become visible. Still, if the shared page becomes indexed, it is easy to find using Google. How to be safe If you use Claude frequently and don't want your shared conversations to appear on the Google search page, then open Settings > go to Privacy > check the Shared chats section to see which conversations have been shared. Also read: Google Pixel 11 Pro to launch in few weeks: Expected India price, features and more Make sure that chats that contain personal details, passwords, financial information, confidential work, or sensitive business plans are deselected. Moreover, when you share a conversation again, keep in mind that the conversation may become accessible to anyone with the link and could also be indexed by search engines, so check the sharing details once.