Hundreds of user conversations with Anthropic’s AI chatbot, Claude, were recently found to be accessible to anyone using Google or other web browsers, according to reports from the BBC and other outlets. The issue stemmed from the chatbot’s “share” feature, where links to conversations intended for specific recipients were instead indexed by search engines, making them discoverable to the general public.
Discovery and Scope of Exposure
The issue was initially identified by users on Reddit, including a user named -void1 who posted to the r/ClaudeAI subreddit on July 25, 2026. By using the Google search query site:claude.ai/share, users found more than 200 conversations across at least 25 pages of search results. Some of these conversations had taken place only weeks prior to the discovery.
The exposed content varied widely in nature. According to the BBC, chat logs included users seeking help with resumes—containing names, contact information, and work history—and others conducting proprietary research in fields such as healthcare, including transcripts of private conversations. Other reports mentioned the exposure of sensitive data, including API keys, cryptocurrency wallet details, and business documents. One specific instance involved a user prompting Claude in April to draft an unpublished blog post regarding a corporate project and cloud security.
Beyond standard chat logs, VentureBeat independently verified that venturebeat.com—including dashboards, reports, documents, and interactive applications—were also appearing in Google Search results via the query site:claude.ai/public/artifacts. These results included what appeared to be internal-looking proposal documents.
Anthropic and Google Responses
A spokeswoman for Anthropic stated that users maintain control over if and when they share conversations. She clarified that links are not guessable or discoverable unless people choose to share them themselves,
adding that when a user shares a conversation, they are making that content publicly accessible and it may be archived by third-party services.
While the Claude share option informs users that anyone with the link
may view the contents, the BBC noted it does not explicitly state that the link may end up in Google search results. Some users argued that anyone with the link
is often interpreted as being similar to an unlisted YouTube video—accessible only to those with the URL, rather than content eligible for public indexing.
A Google spokesman told the BBC that the company does not control which pages are made public on the web, as that action comes from website owners. He stated that Google provides site owners with clear controls to decide if pages can be crawled or indexed and that the company respects those directives.
Technical Details and Mitigation
The search availability of these logs was removed over the weekend, though many had already been saved and shared online. It is likely that Anthropic used available tools to block the links from search results. However, anyone who already possesses a specific URL can still access the conversation unless the owner manually cancels the sharing option. According to Anthropic’s support documentation, users can review and delete shared chats via Settings > Privacy > Shared chats.
Industry Context
This is not the first time an AI company has faced such an issue. The BBC reported that OpenAI experienced a nearly identical problem last year with ChatGPT chat logs becoming publicly accessible, which led the company to change how those logs are accessed.
Worth a look
