Overview
- Reddit users and security reporters found over the weekend that a Google query for site:claude.ai/share returned large numbers of publicly shared Claude conversations and Artifacts, making them easy to find.
- Anthropic said the links were created by users and that it does not publish sitemaps of shared chats, and search listings for the share pages largely disappeared from Google after the exposure became public.
- Reports from multiple outlets said some exposed share pages contained sensitive material such as API keys, cryptocurrency wallet data, medical and personal information, and internal company notes.
- Removing a page from search does not delete the underlying Claude share URL, so anyone with a saved link or an archived copy can still access content until the owner changes the chat’s sharing setting to private.
- The incident echoes earlier AI share-indexing events and highlights a wider usability and privacy gap that could leave users exposed unless platforms add stronger default protections and clearer warnings.