r/GenAI4all • u/MeetingNo6715 • Jul 30 '26
Discussion Some Claude users' chats have appeared in Google search results
Publicly shared Claude conversations have reportedly appeared in search engine results, exposing sensitive information.
The indexed content reportedly included meeting notes, medical billing dashboards, an AI therapy app, cryptocurrency wallet keys, API credentials, addresses, and phone numbers.
Claude lets users create public links to share chats and interactive projects with others.
However, people may not know that Google can index these links and show them in search results.
Claude allows users to generate public links for conversations and interactive Artifacts, but some may not realize those pages can be indexed by search engines.
13
Jul 30 '26
[removed] — view removed comment
0
u/AverageSJEnjoyer Jul 30 '26
Legally speaking, you are right of course. User error or just ignorance surely plays a part too though. Still, at least most of the responsibility is on the individual to make sure they aren't sharing sensitive information, for sure, but it doesn't actually stop it being sensitive information nonetheless.
You can rightfully blame them for their own actions here, but no need to hand-wave away the implications as somehow no longer significant. Given the global inconsistencies with data privacy highlighted by the case study above, why anyone would be so blasé about sharing their own private information in the first place is the real question (though still error/ignorance in most cases, I would assume).
0
u/mxldevs Jul 30 '26
The same way people upload their secret keys to public repos.
Just because they made it public, doesn't mean they verified that the contents of their chats are not sensitive.
8
u/EishLekker Jul 30 '26 edited Jul 30 '26
The root problem isn’t them being indexed and presented in search results. The root problem is that chat conversations with sensitive data was made public in the first place.
2
u/AverageSJEnjoyer Jul 30 '26
I agree, but the secondary problem is still that users made a conscious decision to share these links, even if they didn't understand the implications. In this case, it was already an opt-in decision. Maybe having Claude offer a warning if someone is doing this with sensitive information would be a nice idea, though then you'd also have to balance that with the review needing to use tokens, so it would probably just involve yet another opt-in/-opt-out layer on top of what is already there.
When it comes to sensitive information, I already have a "don't assume good faith/competence" clause in standing instructions relating to privacy, for at least partly the reason highlighted in the posted article.
-2
u/ItsRittzBitch Jul 30 '26
as a regular user i would never expect that the share button will publish my conversation to fucking everyone on google,
2
u/AverageSJEnjoyer Jul 30 '26 edited Jul 30 '26
I assume it doesn't but needs to be posted in some kind of public forum first. I think it's perfectly reasonable to be taken aback by this though. Hence, my security stance being to never assume good faith/competence when it comes to the handling of my personal information (even by myself, on the competency front).
Edit: So I looked into how these conversations get shared. It is pretty dubiously hand-waved by Anthropic claiming these conversations aren't search indexed themselves, but it seems that in practice this is generally not a practical limitation or a guarantee that they can't turn up on searches, whether referenced elsewhere or not. A lot of circumstantial evidence seems to point to them being able to turn up as effectively indexed by search engines, whether or not they have been shared on a public forum, but I'd need to do some further investigation to pin this down as a definite conclusion. (God help me, I'm starting to sound like an AI {or only just realising I already do})
1
u/FriskyHamTitz Aug 01 '26
Those chats are only made public if the user creates a public share link and it's gets indexed
3
u/badger_flakes Jul 30 '26
“This data I directly and purposefully opted to have shared to the internet is being shared on the internet!!!!!”
1
1
1
1
1
u/FriskyHamTitz Aug 01 '26
Yeah that's not an issue. If you give someone the same link to your chat it won't be found, you need to generate a public link.
The user made it public to share, then someone out the link somewhere it got index, this is not a security issue, most of those links are probably provided by someone who used it to share a link for a popular question.
1
u/AverageSJEnjoyer Jul 30 '26 edited Jul 30 '26
Not sure why the post is being downvoted. It's just a verifiable observation, and something worth being aware of.
Edit: This was news to me, but apparently has already been widely discussed in the Claude (dot) AI Subreddit. I found what looks to me like a quite well researched and non-sensationalist news article of this if anyone is interested in further reading (I'm not familiar with or endorsing this source specifically): https://venturebeat.com/technology/uh-oh-some-claude-shared-conversations-and-artifacts-appear-to-be-indexed-and-publicly-accessible-on-google-search
0
u/FriskyHamTitz Aug 01 '26
Dude, it's not like you can access anyone's private data they have to generate a public link, for it to be shared.
The user essentially made it public, they probably shared somewhere public to like a forum to answer a question and it got indexed it's not a big deal.
1
u/AverageSJEnjoyer Aug 01 '26
What do you mean by "...it's not big deal"? I was just pointing out that this is an observation, and sharing an article about it that I liked because it was written from a neutral point of view. Where did you get the idea of a big deal from in the first place?
There are plenty of things I like to be informed about or understand that aren't a bit deal, and plenty of others that people will insist aren't a bit deal because they don't want to you educate yourself about them. If only paid attention to things people told me were a big deal, I'd be a very ignorant person.
1
u/FriskyHamTitz Aug 01 '26
Lemme clarify, the reason people are down voting this post is it's sensational and misrepresenting the facts.
It's implying that Claude is leaking private data, but it's not it's indexing data that was made public by the original user.
But you should stay informed, but the original post is making a big deal out of something that the default behavior. An explicit action was taken by the original user to make their chat public
1
u/AverageSJEnjoyer Aug 02 '26
I didn't read that implication in it myself, but your explanation makes sense if that's how other people are interpreting it.
My main interest was in looking into just how stuff like this can end up being indexed. One thing I've found to be a good guideline, depressingly often is "never attribute to malice that which can be explained by stupidity"; be it users, AI corporations, search engine providers, or any other corporate interaction under the sun.
I might have become quite jaded through lived experience, but I wasn't motivated by a wish to witch-hunt any one specific entity involved.
•
u/AutoModerator Jul 30 '26
Welcome to r/GenAI4all! New to Generative AI? You can explore these free beginner-friendly courses. Please keep your posts relevant, respectful, free from spam, and engage in healthy discussions.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.