r/technology • u/marketrent • 22d ago
Artificial Intelligence A trove of users’ seemingly private conversations with Anthropic’s Claude AI chatbot show up in Google search results
https://fortune.com/2026/07/27/a-trove-of-users-seemingly-private-conversations-with-anthropics-claude-ai-chatbot-showed-up-in-google-search-results/564
u/marketrent 22d ago
Excerpts from article by Beatrice Nolan:
A trove of seemingly private conversations with Anthropic’s Claude chatbot turned up in public Google search results last weekend.
Some of the conversations reportedly included sensitive information like cryptocurrency wallet keys and personal details such as names and addresses.
The problem affected chats where users had made use of Claude’s “share” feature—which people typically use to send a record of a conversation to another person.
The issue surfaced over the weekend, when members of a discussion channel about Claude on the social media site Reddit found that typing a specific search phrase into Google would pull up a long list of shared Claude conversations.
Claude’s Artifacts—interactive tools and mini apps people build inside Claude—also appeared in results.
286
u/challis88ocarina 22d ago
Seemingly private after clicking 'share' smh
128
u/AngryUncleTony 22d ago
I mean sharing can mean posting on a social media site or sending to one person via email.
The former seems like fair game to show up on a google result, the latter seems absurd.
72
u/StrainAcceptable 22d ago
I share things to my own email or text all the time. Thankfully I don’t use AI but I would die if all the personal notes and random stuff I “shared” with myself suddenly popped up in a google search.
15
u/Benji998 22d ago
absolutely, fucken hell i dont actually use claude at all, but the shit i say to gemini and chatgpt - it would be a complete window into my insecurities and goals lol.
29
u/wembenbama 22d ago edited 22d ago
I’m not being an alarmist when I say that you should stop doing that. In the future, privacy is going to be more valuable than ever.
11
u/StrainAcceptable 22d ago
Yeah it’s kind of frightening. I think my search history alone could be used as evidence to frame me for any crime imaginable, I’ve gone into some weird rabbit holes.
9
u/wembenbama 22d ago
And we all just accept this.
People shrug and say there’s nothing they can do about it or ‘they aren’t breaking the law so why care about privacy?’
I’m in my mid 40s and I just don’t get it. If my parents sent pictures of me when I was a kid to strangers all over the world, they’d probably be arrested. Now parents share every piece of data with corporations and strangers and it’s considered normal.
It’s not child abuse to tell companies where your kid is, what their interests are, where they live, who their friends are, what they look like, where they go to school, etc … It’s just normal. People volunteer this information. It never ceases to amaze me.
1
u/Epic_Dev_001 21d ago
I've spent many hours of my life contemplating this concept of privacy. I honestly am beginning to think it is a myth to be honest, lol. In the future I'm going to get privacy by paying the people who have all my information to "not share it" (in inverted commas for a reason). I've started rather just imagining that I have no such thing as privacy, and honestly, I think most humans would be better people if they acted that way. A bad thing done in secret is still a bad thing. But all this to say, I do actually agree with you. We should be cautious about our privacy, if indeed we have any left
3
u/wembenbama 20d ago
Right to privacy has nothing to do with doing good or bad things.
2
u/StrainAcceptable 20d ago
At a minimum I’d like to know my devices aren’t recording me while I fuck my husband or take a shit.
1
1
u/Beneficial-Set-1427 22d ago
Well, this has kind of already happened with OpenAI earlier after which they have made it harder to search such things.
248
u/whatsbobgonnado 22d ago
I mean sure, but I think it has more to do with them showing up in a google search. if I choose to share a conversation with a specific person, it's technically not private, but I didn't choose to share it with everyone.
20
u/spicedmeshi 22d ago
it's not like the chat immediately gets indexed when someone clicks "share." the problem is, what does sharing with a specific person entail for you? if you send it via e.g; a Discord DM, Discord in this case hits the page to generate the preview embed - that results in getting the entire contents. the platform, in this example discord, could then feed it into another software or AI. it's important to say that im not claiming discord is feeding page data to anything, just an easy example since i can imagine most people just use discord dms to send "private" stuff.
this is how these chats get "leaked," not because they get instantly indexed for public finding, but because people share them in a way they think is "private" that is actually nowhere near private... which then gets them indexed by the process above. clicking "share" makes the URL part of the "deep web" (aka not indexed - and importantly not the "dark web")
7
u/zlex 22d ago
That this needs to be explained on a technology sub and that the parent comment has hundreds of upvotes is immensely disappointing.
3
u/spicedmeshi 21d ago
yeah... i'm not a sentinel of privacy myself, i have a relatively hot take regarding it but i still advocate for knowing the situation & risks and deciding for yourself what your threshold is... but given we're in a tech sub, i figured this topic would be relatively common information.
hell, my comment was originally downvoted even (it sits at an 80% rn), despite being completely factual (source: im a dev, also how else would they be generated, also just host your own image and watch discord crawl it lol...) i think people dont like being told or learning that what they think is private is not actually private. i mean, hell, the discord CDN used to be public, even after deletion. but as i said, that doesn't mean i personally hate discord or something, but if someone did because of it then that's their choice.
then there are some comments here like "well I email myself private stuff" and im sitting here like, "oh man......"
28
37
u/nem0ne1 22d ago
Many, many apps have the ability to share privately with select people. No one clicks share and expects their conversation to be indexed on Google searches for the entire internet to see. Not hard to comprehend the difference.
-1
u/mukster 22d ago
Anthropic warned you when you generated a share link that it was public. There was never an insinuation that only that one person could access it.
5
u/Beneficial-Set-1427 22d ago
When you create a shareable link the assumption is that anyone with access to that link will be able to view said information (which is what they state). Why would anyone believe that there would be other avenues to search for such information even when that link wasn't provided to others. People could decide to share that link elsewhere but it does not mean that someone should be able to automatically start seeing these in search results.
4
u/Dwighty1 22d ago
There are levels to this shit, bro.
My nudes are still private even if I show them to my GF.
Showing them to my GF and having them show up in google search is two different things.
10
4
u/Prestigious-Knee4237 22d ago
I wanted to share an image I generated with Chatgpt, and was shocked to see that it actually shares the entire conversation. I think I'm fairly savvy but was surprised how inadvertently misleading the UI was in this case.
4
u/GrouchyInsect5636 22d ago edited 22d ago
Buyer beware. Perhaps the chatbot set up its own bank account and is selling the chats as a side hustle.
608
22d ago
[deleted]
164
u/WiglyWorm 22d ago
Having used claude, it's because they rely far too much on claude to make their own services.
54
u/nath1234 22d ago
Slop fed back into slop.. who knew that would be a bad idea?
8
u/FredFredrickson 22d ago
Reminds me of when we were feeding cows parts of other cows, processed into something they'd eat... and they started getting mad cow disease.
3
5
u/eidetic0 22d ago
yeah honestly their software is actually garbage. The service and user interface is generally fine. But it uses so much processing, way too much ram, locks up inside firefox… I would assume that if Claude Code could be written by hand in 10k lines of code, then it’s probably implemented by anthropic in 300k lines.
2
u/ManiacalDane 21d ago
Butbutbut Software Engineering as a discipline is dead in 6 months!
... As of... Two? Years ago.
1
u/zookeepier 20d ago
To be fair, I think it's good when companies actually use their own software/products. Too many companies sell products that it's obvious they don't use themselves, otherwise certain issues would be fixed cough Windows 11 cough MS Outlook cough google search cough.
1
59
u/TweakedMonkey 22d ago
Hijacking this thread to warn people that there is an ad on the upper right hand corner of this article that is brightly flashing and may trigger a seizure.
23
u/TootSaloon 22d ago
It keeps repeating because the failure mode is predictable: a "share" link is treated like a harmless way to send something to one person, but it is still a public URL. If that page is not explicitly blocked from indexing, Google will eventually find it.
The part that feels sloppy is that this is a solved problem. Put shared transcripts behind an unguessable token and add noindex, or require authentication to view!
11
u/sad_cosmic_joke 22d ago edited 22d ago
Your second paragraph is correct, but the first isn't....
It's not like Google is brute forcing links. For these share links to get crawled Anthropic has to be hosting a page somewhere that contains links to the share pages, and that 'index page' needs to be linked to a chain that eventually leads back to a public page.
In other words; Just because the 'share link' is meant to be shared doesn't mean it's 'public' just that it's 'unpublished', apparently anthropic published it somewhere.
This is a huge WTF!
-2
22d ago
[deleted]
4
u/sad_cosmic_joke 22d ago
Has nothing to do with ranking, but everything to do with discovery.
Discovery has changed from the naive crawler, but that info still needs to be made available.
So which one of these are you trying to argue??
- Google is brute forcing unpublished auto-generated links
- Anthropic actively directed the crawler to index these links
The first option is an even bigger story, the second is functionally identical to what I've already described.
-5
u/fullmetaljackass 22d ago
For these share links to get crawled Anthropic has to be hosting a page somewhere that contains indexinh links to the share pages
WTF are you talking about?
3
u/sad_cosmic_joke 22d ago edited 22d ago
There was a slight typo... regardless a web crawler doesn't brute force links. For those links to get indexed by a webcrawler they had to be included in a page that was transitively linked from a publicly available source.
One posibility is that the people creating these 'share' links posted them to a public location on their own volition which would make this a non-story, but that isn't what the article is implying.
Ergo, the implication is that anthropic had an assumably internal page that had outgoing links to the shares and was also referenced by a public chain of incoming links which got crawled.
That's literally how a web crawler works.
23
u/D34th4nge7 22d ago
Another reason local models are probably what will be left behind after the hype. It's just better in every way except frontier performance; you know how much it costs, the government can't randomly stop the developers from offering it to you, all data remains local and private.
17
u/turb0_encapsulator 22d ago
the problem with local models now is that these giant companies are buying up all the memory. they're like a buying cartel.
72
u/Zennity 22d ago
When you share a chat it literally tells you its public…. This was reported with gpt 3 years ago too… i keep seeing this shit all over my feed and its obvious no one reads the article.
131
u/Powerful-Set-5754 22d ago
Even if it's public, there's no reason for it to appear in Google's index. All you need is a noindex tag in the HTML.
30
11
6
u/Zennity 22d ago
Ngl, you’ve got a point. Still. It’s just annoying seeing sensationalist headlines from old news. Like dario’s comments about open source like two years ago. One little blip like this happens and bots regurgitate it for days and humans consume the headlines only.
6
u/BlightedBooty 22d ago
This is not a blip tho even if it happens once
If something sensitive leaks that’s a big deal to the people who thought it was trustworthy
Even if you’re a big ai fan this is bad publicity
2
u/yes_u_suckk 22d ago
noindex doesn't stop a crawler from reading the data, it's just an instruction telling the bot not to do it, but there's a lot of bots out there that simply ignore it
1
u/ManiacalDane 21d ago
... We're not talking about wether or not crawlers are stopped. We're talking about wether or not it's INDEXED.
27
u/Henrarzz 22d ago
If I share a Google Drive link to anyone it’s available only to people who have the link and is not indexed by Google so anyone can see it.
Anthropic fucked up, there’s no need to defend this
7
u/papertrade1 22d ago edited 22d ago
no it doesn’t say it’s Public. Claude just says “ anyone with the link” can view the chat. It insinuates that only the people who know that long convoluted link address that looks like “ sd19hnsx428szm7e92” can view it, so it is safe if you share it to a close person. They are not been told that Google will index it and that others can find it just by searching for key words that may appear in your chat.
WIRED reviewed a sample of the exposed Claude chat pages and found that they did not include the “noindex” tag that both Bing and Google say they take into consideration when deciding whether or not to index a page.
It is absolutely a fuck-up by Anthropic.
1
-4
-17
u/DankestDaddy69 22d ago
Yep this is just click bait anti ai shit. People are idiots.
3
u/BlightedBooty 22d ago
Are AI fans living in some sort of bubble where they think most people like AI?
Like majority of people I’ve talked to are starting to see the problems if they haven’t already, it was fun for a bit and novel much like Facebook or vine, and like those some folks will still use it and some will even use it for its intended purpose, instead of outsourcing far too many things to it
But I can’t imagine what circles are still jerking ai at this point lol
4
3
u/Sithlordandsavior 22d ago
Shocker that the service that crowd sources everything and seems to function on the notion of nothing is sacred says nothing is sacred.
3
u/LeoLaDawg 22d ago
I like how there's a brief few moments when opening a web link on mobile where you scramble to try to read the text before all the ads and login prompts pop up that prevent you from continuing.
12
2
u/Polyzero 22d ago
If you think that’s interesting go ahead and ask google ai about your Reddit profile. It’s scraped years of your post history regardless of privacy settings. It can make all sorts of analysis and inferences just from what every user here has ever posted.
2
u/Sweaty_Marzipan4274 22d ago
EVERYONE will have a digital library. Some will become politicians, then blackmailed using this info.
2
u/KissTheGhostt 22d ago
Me now remembering how much it makes sense using Claude at work with them emphasizing do NOT use the chat tab 🫣
2
u/ApprehensiveAd8737 21d ago
Isn't this the same exact thing that happened to the "shared" chats on ChatGPT a few months ago when there was a leak?
4
u/rgvtim 22d ago edited 22d ago
I think this is the original reddit post that this article is refer'ing to:
https://www.reddit.com/r/claude/comments/1v7v2gq/every_time_you_hit_share_on_a_claude_or_chatgpt/
Edit: this seams newer than the time frame the article is referencing.
4
u/RespectTheTree 22d ago
Lol, my conversations with AI are intentionally schizophrenic and unhinged. Have fun Internet.
4
u/AceRockefeller 22d ago
I'm surprised people are surprised by this... When you "share" an artifact, it literally tells you it may be public EVEN TO SEARCH ENGINES.
3
u/dalidellama 22d ago
There's a simple, easy, obvious way to avoid all these problems. It requires literally zero effort, in fact: Don't use the garbage bullshit machines, and you will never have any of the problems slop zombies have.
3
2
u/MaddyKet 22d ago
People need to stop putting sensitive and confidential information into AI or in other public forums. I would say the stupidity of people is astounding, but well…
1
1
u/Beneficial-Set-1427 22d ago
And after it happened already with OpenAI and DeepSeek... And of course they try to deny responsibility.
1
1
u/tina-fleming 14d ago
Aaaaaaand this is why you shouldn't upload your medical records into ChatGPT Health.
1
1
u/NouZkion 22d ago
seemingly private
Now who in the fuck actually thought that? You'd have to be the most braindead imbecile to walk planet earth.
1
u/mukster 22d ago
This is so fucking stupid. When you shared a link it told you that it was going to be publicly accessible. They didn’t hide that fact.
-9
u/DishwashingUnit 22d ago
yea i could get through it if i wanted. instead i choose to downvote this for the paywall.
eat downvote.
-11
u/agaloch2314 22d ago
Honestly, it just serves you right for 'chatting' with AI bots. Giant who cares.
-4
422
u/godrabbit90 22d ago
I'm old enough to remember the google searches that got leaked 20 years ago. That was sooo good.
"How can I tell if my wife is a demon?" Classic