Google Indexed Claude AI Shared Chats Before Removal

A recent incident has highlighted the potential risks of sharing conversations with large language models like Anthropic’s Claude. Users who created public links to their chats found that these conversations were appearing in Google Search, allowing strangers to locate them without receiving the URLs directly.

When a query using site:claude.ai/share was entered into Google, numerous shared conversations were returned before the results disappeared. This exposure occurred despite Anthropic’s documentation stating that conversations remain private by default, but users can create public snapshots through the Share menu.

Anyone with the resulting link can read messages sent before the snapshot was created. However, in this case, search indexing gave those links a much larger audience. A user may send a conversation to one friend or colleague, but an indexed page can be found by people searching for a name, company, technical phrase, or another term contained in the transcript.

Reports said searchable conversations included legal discussions, technical work, source code, business information, and personal topics. Some Reddit users also claimed to have found credentials and cryptocurrency information, although those individual findings have not been independently confirmed.

The site:claude.ai/share query later stopped returning the shared pages, apparently after the exposure became public. Removing a page from Google Search does not delete the Claude conversation or disable its sharing link. Anyone who saved the URL may still be able to open it until the owner changes the conversation from Public to Private.

Available reporting does not establish whether Google, Anthropic, or both initiated the removal. A company spokesperson attributed earlier search visibility to users posting their links on websites or social media, where search engines could find them. This makes the incident a search-indexing and privacy exposure, not evidence that attackers broke into Claude or obtained ordinary private conversations.

Many users understand ‘anyone with the link’ to mean that only people who receive the URL will see it, not that the conversation could appear in search results. However, this misunderstanding can have serious consequences when dealing with sensitive information like credentials and cryptocurrency details.

A similar incident affected Google’s own Bard chatbot, now called Gemini, in September 2023. Hackread found more than 300 public Bard conversation pages in Google Search after users created share links. Google acknowledged that the indexing and accompanying search snippets were unintentional and began removing them.

Claude users can review active public links under Settings, Privacy and Shared Chats. Any conversation containing personal data, company information, credentials, legal material, or private code should be changed back to Private. Removing the link cannot retrieve copies already saved by other people, so shared AI chats should be treated as public webpages from the moment the link is created.