Hundreds of user conversations and “Artifacts” from Anthropic’s Claude AI chatbot were recently found to be accessible to the public via Google and other web browsers, according to reports from BBC and other outlets. The exposure occurred after search engines indexed public links created by users who had chosen to share their chats.
Discovery of Indexed Conversations
The issue was first identified by users on Reddit, including user -void1, who posted to the r/ClaudeAI subreddit on July 25, 2026. By using Google search operators such as site:claude.ai/share
, users discovered more than 200 conversations spanning at least 25 pages of search results. Some of these interactions had taken place only weeks prior.
The exposure extended beyond simple text chats to include Claude Artifacts—interactive applications, dashboards, and documents. Om Patel, founder of research firm BigIdeasDB, reported on July 26, 2026, that queries like site:claude.ai/public/artifacts
surfaced these AI-generated work products. VentureBeat independently verified that multiple third-party Artifacts were accessible via Google Search without authentication, even though the URLs were not previously known to the reporter.
Nature of the Exposed Data
The indexed content included a wide array of sensitive and personal information, such as:
- Professional and Corporate Data: Internal business documents, software code, employee work notes, and a draft blog post about cloud security involving a corporate project.
- Personal Information: Resumes containing names, contact information, and work history, as well as files containing children’s names and phone numbers.
- Sensitive Records: Medical records, transcripts of private conversations used for healthcare research, and cryptocurrency wallet details or API keys.
Responses from Anthropic and Google
A spokeswoman for Anthropic, Amie Rotherham, stated that users maintain control over if and when they share conversations. She noted that links are not guessable or discoverable unless people choose to share them themselves
and that once a user makes content publicly accessible, it may be archived by third-party services. Anthropic further stated it does not provide sitemaps or chat directories to search engines.
Google spokesperson Ned Adriance told TechCrunch that search engines do not decide which pages become public, as that action comes from website owners. He clarified that Google provides site owners with controls to prevent crawling or indexing and respects those directives. Because the search indexing of the logs has since ceased, it is likely Anthropic used available tools to block the links from search results.
Resolution and User Controls
The searchable results largely disappeared by Monday afternoon following the weekend discovery. However, reports indicate that many of the logs were saved and shared widely online before they were removed from the index. Additionally, anyone who already possesses a specific URL can still access a conversation unless the owner manually cancels the sharing option.
Users who wish to manage their shared content can review and delete shared chats by navigating to Settings > Privacy > Shared chats within the Claude interface. According to Anthropic’s support documentation, uploaded files and data from connected tools are not included when a chat is shared.
This incident mirrors a similar occurrence last year involving OpenAI’s ChatGPT, where chat logs became publicly accessible, eventually leading the company to change how such logs are accessed.
Worth a look
