A privacy gap in Anthropic’s conversation-sharing feature briefly turned user chat histories into publicly searchable documents over the weekend, exposing everything from medical records to cryptocurrency wallet keys.
The issue came to light when a Reddit user discovered that typing `site:claude.ai/share` into Google returned pages of other people’s Claude conversations. Because the share feature generates a publicly accessible URL, and those URLs lacked a `noindex` tag telling search engines to stay away, any shared link that had been posted on a public forum, Discord server, or social media feed became fair game for Google’s crawlers.
The affected conversations were not the result of a server breach. Anthropic’s systems were not compromised. The problem was architectural: Claude’s share button creates a permanently accessible page for anyone with the link, and the mental model of “I’ll send this one link to one person” did not account for search engine bots following the same URLs.
Among the exposed material, according to reporting from TechCrunch and Fortune, were clinical trial data containing patient names, children’s personal information, cryptocurrency recovery phrases, internal company documents, employee performance reviews, and explicit content. The common thread across all cases was users treating the Claude chat window as a private scratchpad before using the share feature without realizing the implications.
Anthropic moved quickly to close the gap. By July 26, the company added `noindex` and `nofollow` meta tags to all shared chat and Artifact pages. A search for `site:claude.ai/share` now returns no results. However, the patch only prevents future indexing by search engines. It does not delete the shared links themselves or revoke access for anyone who already has them.
The incident echoes a similar episode from 2024, when roughly 100,000 shared ChatGPT conversations were indexed by search engines due to the same missing `noindex` tag. Grok’s shared links have also been searchable on Google at various points. Each platform patched the issue after the fact, but the underlying pattern – a share-by-default architecture with no expiration or access control – remains unchanged across the industry.
For Claude users, the practical fix is straightforward: audit shared conversations in Settings, under Privacy, and revoke access to anything sensitive. Shared conversations remain publicly accessible as long as the link exists, even if search engines can no longer discover them.
Sources: PSA: Your Claude shared chats and Artifacts may have ended up on Google (TechCrunch, July 27, 2026); A trove of users’ seemingly private conversations with Anthropic’s Claude AI chatbot showed up in Google search results (Fortune, July 27, 2026); Claude AI shared chats indexed by Google (ZDNet, July 27, 2026); Claude AI Shared Chats Reportedly Exposed in Google Search Results (Cyber Security News, July 26, 2026)