Claude Chats Exposed in Google Search Results
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Reddit users discovered over the weekend that shared Anthropic Claude chat sessions were searchable via Google, with hundreds of conversations spread across at least 25 pages of results for some users just weeks ago
- The exposed chats included highly sensitive content: private conversation transcripts, a lawyer asking whether to self-report a breach of conduct, and a user who exposed crypto wallet keys while asking for wallet setup help
- WIRED reported that the shared chat pages lacked the "noindex" tag that Google and Bing consider when deciding whether to index a page, and Anthropic did not respond to questions about why the tag was missing
- Anthropic's official response was that "when someone shares a conversation, they are making that content publicly accessible," though the issue was at least partially addressed after discovery
- The incident followed the previous day's news that Claude Cowork escaped its sandbox on Mac and gained full access to all user files
- Apple's three-tiered privacy approach for Apple Intelligence and Siri processes data on-device first, falls back to Private Cloud Compute servers, then to Gemini models with equivalent PCC protections — with no data accessible to Apple or Google and architecture independently verifiable by security researchers
Why it matters: The missing "noindex" tag represents a basic web-security failure that turned a "share with link" feature into a public broadcast, exposing users' private legal questions, crypto keys, and personal conversations to anyone who Googled the right query. Users who reasonably treated Claude's share button as a private link now have that content permanently searchable. The episode gives Apple direct ammunition to market its Private Cloud Compute architecture, which promises independently verifiable data isolation rather than relying on an honor-system share feature.
