Is Anthropic leaking your chats? Why some Claude conversations are appearing in Google Search
Social media is buzzing with claims that Claude conversations containing sensitive information are appearing in Google Search. Some are even calling it a major data leak. But is Anthropic really leaking your chats, or is there more to the story? Here's what actually happened.
If you follow conversations around AI, chances are you've come across posts over the weekend claiming that conversations shared through Anthropic's Claude chatbot were appearing in Google Search results. In fact, many users claimed it was an Anthropic data leak after screenshots surfaced online showing Claude conversations containing sensitive information such as crypto wallet details, API keys, CVs and company documents.
But before you assume Anthropic has suffered a data leak, here's what's actually going on. This is not a data breach or hack. Claude's private chats are still private. The issue affects only conversations that users had intentionally shared using Claude's public Share feature, which creates a publicly accessible webpage.
Concerns about a potential data leak began after users on Reddit revealed that a simple Google Search using queries such as site:claude.ai/share surfaced pages of Claude conversations. While some users described it as a major privacy failure, others pointed out that the chats had been made public by their owners using the Share feature.
Developer Om Patel was among those who flagged the issue on X, calling it a "serious privacy problem".
“When you use Claude's Share feature, it creates a public link. It turns out those links got indexed by search engines, so 'share with anyone who has the link' actually became 'anyone can find this by searching',” he wrote in his post on X.
According to Patel, the problem wasn't that Claude's private chats had been leaked, but that public share links had become discoverable through search engines.
Why were Claude chats showing up in Google Search?
When Claude users click Share, the chatbot creates a public webpage containing the conversation up to that point. Anyone with the link can open and read the chat.
The problem was that some of these public links started appearing in search engine results, making them much easier to find.
Initially, many developers believed Anthropic had simply forgotten to add a noindex tag, which tells search engines not to include a webpage in search results. However, independent analysis by developers and SEO experts who examined Anthropic's configuration found that Anthropic had blocked search engines from crawling its shared chat pages using its robots.txt file. While this prevents search engines from reading the page's contents, it doesn't necessarily stop them from indexing the URL if they discover the link elsewhere online.
As a result, Google and Bing reportedly listed some Claude share links in search results, even though they didn't display a preview of the conversation. Instead, users saw the message: "No information is available for this page." However, anyone who clicked on the link could still access and read the shared conversation.
In short, the Claude conversations themselves did not appear in Google Search previews, but the public links did, allowing anyone who found them to open and read the chats.
So, should Claude users be worried?
Not if you have not shared a chat. Only conversations that users had intentionally shared using Claude's Share feature could be accessed.
According to Anthropic's support documentation, sharing a chat creates a public webpage containing the conversation. Uploaded files and data pulled in through connected tools are not included. You can also review and remove their shared chats by going to Settings > Privacy > Shared chats.
What kind of information was available on Google?
Developers and researchers who browsed the indexed page reportedly found everything from crypto wallet details and access credentials to resumes, company documents, legal queries and everyday conversations.
As the issue gained attention online, many users reported that the shared chat pages gradually disappeared from Google Search. However, some claimed the links continued to appear for a while on Bing and Brave Search.
Do note that removing a page from Google Search doesn't disable the share link itself. Anyone who already has the URL can still access the conversation unless the owner manually unshares it.
Anthropic had not issued a public statement addressing the incident at the time of writing.
OpenAI faced a similar issue
Anthropic is not the first AI company to face such an issue.
Last year, OpenAI rolled out an experimental feature that allowed users to make shared ChatGPT conversations discoverable in search engines. After users found hundreds of ChatGPT conversations appearing in Google Search, OpenAI quickly withdrew the feature, saying it created too many opportunities for people to accidentally expose information they did not intend to make public.
If you follow conversations around AI, chances are you've come across posts over the weekend claiming that conversations shared through Anthropic's Claude chatbot were appearing in Google Search results. In fact, many users claimed it was an Anthropic data leak after screenshots surfaced online showing Claude conversations containing sensitive information such as crypto wallet details, API keys, CVs and company documents.
But before you assume Anthropic has suffered a data leak, here's what's actually going on. This is not a data breach or hack. Claude's private chats are still private. The issue affects only conversations that users had intentionally shared using Claude's public Share feature, which creates a publicly accessible webpage.
Concerns about a potential data leak began after users on Reddit revealed that a simple Google Search using queries such as site:claude.ai/share surfaced pages of Claude conversations. While some users described it as a major privacy failure, others pointed out that the chats had been made public by their owners using the Share feature.
Developer Om Patel was among those who flagged the issue on X, calling it a "serious privacy problem".
“When you use Claude's Share feature, it creates a public link. It turns out those links got indexed by search engines, so 'share with anyone who has the link' actually became 'anyone can find this by searching',” he wrote in his post on X.
According to Patel, the problem wasn't that Claude's private chats had been leaked, but that public share links had become discoverable through search engines.
Why were Claude chats showing up in Google Search?
When Claude users click Share, the chatbot creates a public webpage containing the conversation up to that point. Anyone with the link can open and read the chat.
The problem was that some of these public links started appearing in search engine results, making them much easier to find.
Initially, many developers believed Anthropic had simply forgotten to add a noindex tag, which tells search engines not to include a webpage in search results. However, independent analysis by developers and SEO experts who examined Anthropic's configuration found that Anthropic had blocked search engines from crawling its shared chat pages using its robots.txt file. While this prevents search engines from reading the page's contents, it doesn't necessarily stop them from indexing the URL if they discover the link elsewhere online.
As a result, Google and Bing reportedly listed some Claude share links in search results, even though they didn't display a preview of the conversation. Instead, users saw the message: "No information is available for this page." However, anyone who clicked on the link could still access and read the shared conversation.
In short, the Claude conversations themselves did not appear in Google Search previews, but the public links did, allowing anyone who found them to open and read the chats.
So, should Claude users be worried?
Not if you have not shared a chat. Only conversations that users had intentionally shared using Claude's Share feature could be accessed.
According to Anthropic's support documentation, sharing a chat creates a public webpage containing the conversation. Uploaded files and data pulled in through connected tools are not included. You can also review and remove their shared chats by going to Settings > Privacy > Shared chats.
What kind of information was available on Google?
Developers and researchers who browsed the indexed page reportedly found everything from crypto wallet details and access credentials to resumes, company documents, legal queries and everyday conversations.
As the issue gained attention online, many users reported that the shared chat pages gradually disappeared from Google Search. However, some claimed the links continued to appear for a while on Bing and Brave Search.
Do note that removing a page from Google Search doesn't disable the share link itself. Anyone who already has the URL can still access the conversation unless the owner manually unshares it.
Anthropic had not issued a public statement addressing the incident at the time of writing.
OpenAI faced a similar issue
Anthropic is not the first AI company to face such an issue.
Last year, OpenAI rolled out an experimental feature that allowed users to make shared ChatGPT conversations discoverable in search engines. After users found hundreds of ChatGPT conversations appearing in Google Search, OpenAI quickly withdrew the feature, saying it created too many opportunities for people to accidentally expose information they did not intend to make public.
If you follow conversations around AI, chances are you've come across posts over the weekend claiming that conversations shared through Anthropic's Claude chatbot were appearing in Google Search results. In fact, many users claimed it was an Anthropic data leak after screenshots surfaced online showing Claude conversations containing sensitive information such as crypto wallet details, API keys, CVs and company documents.
But before you assume Anthropic has suffered a data leak, here's what's actually going on. This is not a data breach or hack. Claude's private chats are still private. The issue affects only conversations that users had intentionally shared using Claude's public Share feature, which creates a publicly accessible webpage.
Concerns about a potential data leak began after users on Reddit revealed that a simple Google Search using queries such as site:claude.ai/share surfaced pages of Claude conversations. While some users described it as a major privacy failure, others pointed out that the chats had been made public by their owners using the Share feature.
Developer Om Patel was among those who flagged the issue on X, calling it a "serious privacy problem".
“When you use Claude's Share feature, it creates a public link. It turns out those links got indexed by search engines, so 'share with anyone who has the link' actually became 'anyone can find this by searching',” he wrote in his post on X.
According to Patel, the problem wasn't that Claude's private chats had been leaked, but that public share links had become discoverable through search engines.
Why were Claude chats showing up in Google Search?
When Claude users click Share, the chatbot creates a public webpage containing the conversation up to that point. Anyone with the link can open and read the chat.
The problem was that some of these public links started appearing in search engine results, making them much easier to find.
Initially, many developers believed Anthropic had simply forgotten to add a noindex tag, which tells search engines not to include a webpage in search results. However, independent analysis by developers and SEO experts who examined Anthropic's configuration found that Anthropic had blocked search engines from crawling its shared chat pages using its robots.txt file. While this prevents search engines from reading the page's contents, it doesn't necessarily stop them from indexing the URL if they discover the link elsewhere online.
As a result, Google and Bing reportedly listed some Claude share links in search results, even though they didn't display a preview of the conversation. Instead, users saw the message: "No information is available for this page." However, anyone who clicked on the link could still access and read the shared conversation.
In short, the Claude conversations themselves did not appear in Google Search previews, but the public links did, allowing anyone who found them to open and read the chats.
So, should Claude users be worried?
Not if you have not shared a chat. Only conversations that users had intentionally shared using Claude's Share feature could be accessed.
According to Anthropic's support documentation, sharing a chat creates a public webpage containing the conversation. Uploaded files and data pulled in through connected tools are not included. You can also review and remove their shared chats by going to Settings > Privacy > Shared chats.
What kind of information was available on Google?
Developers and researchers who browsed the indexed page reportedly found everything from crypto wallet details and access credentials to resumes, company documents, legal queries and everyday conversations.
As the issue gained attention online, many users reported that the shared chat pages gradually disappeared from Google Search. However, some claimed the links continued to appear for a while on Bing and Brave Search.
Do note that removing a page from Google Search doesn't disable the share link itself. Anyone who already has the URL can still access the conversation unless the owner manually unshares it.
Anthropic had not issued a public statement addressing the incident at the time of writing.
OpenAI faced a similar issue
Anthropic is not the first AI company to face such an issue.
Last year, OpenAI rolled out an experimental feature that allowed users to make shared ChatGPT conversations discoverable in search engines. After users found hundreds of ChatGPT conversations appearing in Google Search, OpenAI quickly withdrew the feature, saying it created too many opportunities for people to accidentally expose information they did not intend to make public.
