All news
cybersecurityairegulationproduct

Claude Shared Chats Exposed on Google Search

28 Jul 2026

What happened

Over the weekend, Reddit users discovered that publicly shared Claude.ai conversations and Artifacts were searchable on Google using operators like site:claude.ai/share. The discovery, first flagged by a Reddit user on Saturday and reported by 404 Media on Monday morning, revealed that content users believed was privately shared had been quietly indexed by search engines.

By Monday afternoon, TechCrunch's own test search returned no results — suggesting the exposure had been remediated within roughly two days of the initial report. No conflicting details have emerged about the timeline itself.

What was exposed

According to the report, the indexed content included:

  • Detailed medical reports and clinical trial results with patient names
  • Documents containing children's names and phone numbers
  • Internal-use-only company documents and employee reviews with personal information

In one notable example, a chat labeled "shared by Anthropic" showed Claude generating erotica — content that appears to conflict with Anthropic's own usage policy, which prohibits sexually explicit generation. It's unclear whether this reflects a system failure or user manipulation of an official example.

Anthropic's response

Anthropic spokeswoman Amie Rotherham said the company gives users control over public sharing and does not share chat directories or sitemaps with search engines like Google. That statement leaves open a key question the report does not resolve: if Anthropic doesn't submit sitemaps to Google, how did these shared pages get indexed in the first place?

For scale, Google had indexed just under 600 Claude conversations last year before those pages later disappeared from search results — suggesting this isn't the first time shared Claude content has surfaced in search. Separately, a researcher previously scraped around 100,000 ChatGPT conversations that had been set to public sharing, indicating this class of exposure isn't unique to Claude.

Open questions

The report leaves several details unconfirmed: the total number of Claude conversations exposed in this specific incident, what remediation steps Anthropic took beyond the apparent disappearance of search results, and whether affected users or authorities were notified.

Why founders should care

If your product includes any kind of "share" or public-link feature — chat transcripts, documents, dashboards — this incident suggests that default sharing settings may carry a meaningful risk of unintended search-engine indexing, even without your platform actively submitting sitemaps. Founders building AI tools that handle health, financial, legal, or personal data should treat this as a signal to audit sharing defaults and search-indexing behavior before launch, not after a Reddit thread forces the issue.

The erotica example also points to a broader risk: stated usage policies from AI vendors may not always match actual system output, especially in edge cases or official examples. Founders relying on a vendor's safety claims as a compliance backstop may want to treat those claims as directional rather than guaranteed.

On the upside, Anthropic's apparent remediation within about two days indicates that fast public reporting can drive quick fixes — a pattern worth remembering if a similar exposure ever surfaces in your own product. It also points to a possible opportunity: startups that can offer clearer sharing warnings, stronger default privacy settings, or built-in de-indexing safeguards may find real differentiation as users grow more wary of "share" buttons on AI platforms.

Sources