Cybersecurity & Privacy

Shared Claude Chats and Artifacts Surfaced on Google — Some Exposing Medical Records and Children’s Data

A missing noindex tag let search engines index shared Claude conversations; Google has cleared the results but Bing still showed hundreds, and the tag is reportedly still missing.

An untold number of shared Claude conversations and Artifacts were found publicly searchable on Google over the weekend, after Reddit users discovered that search operators like “site:claude.ai/share” surfaced a long list of shared chats — some reportedly containing health records, private company documents, and the names and phone numbers of children, TechCrunch reports.

The exposure traces to Claude’s “share chat” feature, which creates a link that anyone with the URL can view. Before the issue was remediated, Futurism reported finding “a detailed medical report of a real patient, clinical trial results that included patient names, documents sharing the names and phone numbers of primary school-aged children, company documents marked for internal use only, and employee reviews that included personal information about workers.” The Decoder adds that some publicly accessible chats reportedly contained crypto keys and legal queries.

The issue was first flagged by a Reddit user on Saturday and first reported by 404 Media on Monday morning. By Monday afternoon, TechCrunch’s test searches on Google returned no results — but the story doesn’t end there.

Why shared Claude chats ended up in search results

The mechanics come down to a missing tag. Wired reviewed a sample of exposed pages and found they did not include the “noindex” tag that both Google and Bing say they consider when deciding whether to index a page. Anthropic instead relies on robots.txt — which has disallowed crawler access to shared chats since at least September 2025, per the Wayback Machine — but Google’s own developer guide says it ignores robots.txt for indexing purposes if a page is linked from elsewhere and lacks a noindex directive.

Anthropic appeared to place responsibility on users. “We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google,” spokeswoman Amie Rotherham told TechCrunch. “These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services.”

Google pushed the responsibility right back. “Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines,” spokesperson Ned Adriance said. “We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives.”

The exposure may not be over

While Google’s results cleared, Wired reported Bing still showed “about 612 results” for the site:claude.ai/share query at the time of its writing, and The Decoder notes chats stayed visible longer on Bing and Brave Search. More concerning: the pages Wired reviewed still lacked a noindex tag after the cleanup, meaning they could potentially show up in search engines again. Anthropic did not respond to Wired’s questions about the missing tag.

The industry has been here before. Last year, Forbes reported a nearly identical Claude indexing incident — Google estimated just under 600 conversations at the time — and 404 Media reported a researcher scraped around 100,000 publicly shared ChatGPT conversations, after which OpenAI removed its sharing feature entirely. How closely the current exposure tracks last year’s scale hasn’t been independently confirmed.

For a company that markets itself on trust, the recurrence stings — Anthropic’s privacy practices have drawn scrutiny before, including over its data-training policy changes. Users can review which chats they’ve shared under Settings, then Privacy, then Shared Chats, and revoke any links they no longer want public.

FAQ

How did private Claude chats end up on Google?

Users created public share links, and the shared pages lacked a “noindex” tag. Robots.txt alone does not keep pages out of search results when they are linked from elsewhere on the web, per Google’s own documentation.

Has the Claude chat exposure been fixed?

Google results were cleared by Monday afternoon, but Wired found the pages still lack the noindex tag and Bing still showed about 612 results, so the content could resurface.

How do I check which of my Claude chats are public?

Go to Settings, then Privacy, then Shared Chats in Claude to review and revoke any shared conversation links.