EN·DE
IT Security

Claude Chat Leak: Private Conversations Exposed in Google Search for Third Time

Hundreds of private Claude conversations appeared in Google search results over the weekend, marking the third major AI chatbot share-feature leak in two years.

This article was drafted with AI assistance from multiple sources and was reviewed and approved by a human editor before publication.

Over the weekend of July 25–26, 2026, hundreds of conversations with Anthropic's Claude chatbot became publicly visible in Google search results. The exposed chats contained sensitive data including cryptocurrency wallet keys, names, addresses, erotic fantasies, secret codes, patient information, and phone numbers.

Only chats where users had enabled Claude's 'share' feature were affected. That feature generates a public URL snapshot of a conversation, making it accessible to anyone who has the link.

Anthropic's robots.txt file has instructed search engine crawlers to stay away from shared chats since at least September 2025. However, the shared chat pages lacked a 'noindex' HTML tag, which tells search engines not to list a page in results even if it is linked from elsewhere. Google ignores robots.txt directives when a page is linked from other sites and lacks a noindex tag, allowing the chats to be indexed.

An Anthropic spokesperson said the company gives users control over sharing conversations publicly and does not provide chat directories or sitemaps to search engines. The spokesperson added that when someone shares a conversation, the content becomes publicly accessible and may be archived by third-party services, like any public web content.

Google spokesperson Ned Adriance said search engines do not control which pages are made public on the web, and that site owners have clear tools—such as noindex tags—to prevent indexing. He stated that Google always respects those directives.

This is at least the third time a major AI chatbot's share feature has leaked user data into search engines. In 2025, around 100,000 ChatGPT conversations were exposed via Google, and hundreds of thousands of Grok chats were also indexed. Claude itself had a similar incident earlier in 2025.

As of July 28, 2026, the exposed chats have been removed from Google, Bing, and DuckDuckGo search results, though direct links to the shared chats still work. Bing still showed about 612 results for the search 'site:claude.ai/share' at the time of reporting.

Despite the cleanup, WIRED's review found that shared chat pages still lacked a noindex tag, meaning they could be re-indexed in the future. Users can manage their shared chats by navigating to Settings > Privacy > Shared chats.

One chat labeled 'shared by Anthropic' was found to contain explicit content generated by Claude, which violates Anthropic's own policy against erotica.

Sources

  1. Web research – Private Claude Chats Exposed in Google and Bing Search Results
  2. Web research – Users’ seemingly private conversations with Anthropic’s Claude showed up in Google search results | Fortune
  3. DER SPIEGEL - Netzwelt – Anthropic Claude: Private KI-Chats tauchten in Google-Suchergebnissen auf