- A Reddit user discovered on July 25 that a Google search for shared Claude conversations returned hundreds of fully readable chats, exposing crypto wallet credentials and sensitive data.
- The leak was caused by a missing noindex meta tag on Anthropic’s share links, which allowed Google to index them despite an existing robots.txt file.
- Google began removing the exposed results by July 26 after Anthropic updated its configuration, but Bing is still surfacing the shared links.
A Reddit user discovered on July 25 that a simple Google search—site:claude.ai/share—returned hundreds of other people’s conversations, exposing crypto wallet seed phrases and sensitive personal data. The thread quickly hit 4,000 upvotes, revealing a lawyer asking about self-reporting a professional ethics violation and someone pasting a cryptocurrency master password.
The root cause was a single missing noindex tag, a standard HTML instruction that tells search engines not to list a page. Anthropic’s robots.txt file was in place but couldn’t prevent indexing once share links appeared on public forums, tweets, or Slack workspaces.
Google’s own documentation explains why blocking a crawl doesn’t prevent indexing if the URL appears elsewhere on the web. The same gap affected Claude’s published artifacts, surfacing payroll spreadsheets with employee names and unreleased product roadmaps.
OpenAI faced a similar issue 11 months ago when its “Make this chat discoverable” checkbox sent thousands of conversations to search engines. Anthropic began removing exposed Claude results by July 26 after updating its configuration, but Bing is still surfacing shared links.
A GitHub repository called Shared-Claude-Chats has already archived 453 Claude conversations and 519 Grok chats from the exposed links. To revoke your own shares, go to Settings → Privacy → Shared Chats, but note that action doesn’t delete anything already saved.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
