Search Engines Index Private Shared Claude AI Conversations

Publicly shared conversations from Anthropic's Claude chatbot became discoverable through search engines, exposing sensitive data such as API keys, cryptocurrency wallet details, internal company documents, and legal matters. The vulnerability allowed users to find thousands of conversations by using specific search queries like "site:claude.ai/share" on Google and Brave Search.

Developers and researchers reported that while Anthropic's documentation claims conversations are private by default and the company employs robots.txt to discourage indexing, links posted on social media or forums bypassed these protections. The issue reportedly stemmed from shared pages lacking "noindex" instructions, which normally prevent search engines from indexing specific web content.

Some reports indicate that Google began removing many of the indexed pages by July 24, 2026, and further results disappeared by July 26. This incident follows a similar occurrence in 2025. As of July 27, Anthropic has not issued a public statement regarding the leak. Privacy experts recommend that users review their active shared links in the platform's privacy settings and avoid posting share URLs on public forums.