Google Indexing Shared Claude Chats, Exposing API Keys
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Claude users' publicly shared chats are being indexed by Google, with exposed content including API keys, login credentials, cryptocurrency wallet keys, and personal information such as names, addresses, and phone numbers
- Surfaced chats include an AI-powered therapy app that someone vibe-coded, meeting notes, and a dashboard apparently built to analyze medical billing data
- A Google dork that surfaced standard Claude chats appears to have been mitigated, but a separate query targeting Claude Artifacts (interactive workspaces for vibe-coded apps) still works as of writing
- Anthropic did not immediately respond to a request for comment, and Claude users must manually change their privacy and sharing settings to revoke public access on existing shares
- A nearly identical exposure hit OpenAI's ChatGPT last year, with roughly 100,000 conversations surfacing on Google — and because a researcher scraped them, third parties may have already hoovered up exposed Claude content too
- Forbes reported the same Claude indexing problem in September 2025, indicating the underlying issue is recurring rather than freshly introduced
Why it matters: Users sharing Claude chats via public links likely don't realize Google is indexing them, meaning sensitive data — crypto wallet keys, API credentials, personal addresses, medical billing tools — has probably already been scraped by third parties. The prior ChatGPT incident shows de-indexing doesn't undo the damage, and Anthropic declined to comment on remediation.
