Overview
- Reddit users discovered over the weekend that Google could surface hundreds of Claude share pages, which created public web URLs for conversations and interactive Artifacts.
- The technical cause was the absence of an in‑page noindex meta tag on shared pages while relying only on robots.txt, a setup that does not stop indexing if links to the pages appear elsewhere on the web.
- Reportedly exposed material included medical records, internal company documents, resumes, API and crypto keys, and other personally identifiable information that users had placed in shared chats.
- Anthropic added noindex controls and search engines largely removed the pages from search results, but individual share URLs remain accessible to anyone with the link and some conversations were archived offsite.
- This episode mirrors prior incidents with ChatGPT and Grok and highlights a recurring product‑design gap that puts users, companies, and regulators at risk unless platforms change default sharing safeguards.