Shared Claude AI chats with sensitive data surface in Google search

Hundreds of shared conversations from Anthropic's Claude AI chatbot became discoverable through Google search this week, exposing sensitive material including cryptocurrency wallet keys, personal information, and professional communications that users had not intended to make publicly findable.

How the Conversations Were Found

On July 25, a Reddit user demonstrated that the search operator `site:claude.ai/share` returned a large number of other users' Claude conversations in Google results. The thread drew hundreds of comments within hours as users identified credentials, CVs, and identifiable employee information among the indexed pages. One user found a live cryptocurrency wallet with its keys visible and a real balance.danieljamesglover+1

The conversations were ones users had opted to share via Claude's built-in share feature, which creates a public URL for each conversation. Anthropic has maintained that shared conversations only became visible in search engines because users posted the links on external sites or social media, where crawlers could discover them. Google estimated in an earlier similar incident that it had indexed just under 600 Claude conversations.forbes

A Familiar Pattern With a Technical Twist

This marks the second time Claude shared conversations have appeared in Google results. Forbes first reported the issue in September 2025, making Anthropic the third AI company — after OpenAI and xAI — to face this problem. OpenAI subsequently withdrew its sharing feature entirely, calling it "a short-lived experiment" that "introduced too many opportunities for folks to accidentally share things they didn't intend to".forbes

The underlying technical issue involves a conflict between Anthropic's robots.txt file, which blocks Google from crawling shared conversation pages, and the noindex header those pages carry. Because Google cannot access the pages to read the noindex instruction, it can still list URLs it discovers through links posted elsewhere on the web. Google's own documentation warns that "if the page is blocked by a robots.txt file, the crawler will never see the noindex rule, and the page can still appear in search results".danieljamesglover

Aftermath and Ongoing Concerns

By Sunday morning, the affected pages had largely disappeared from Google's results, though users reported they remained accessible on Bing and Brave. The conversations themselves remain live at their original URLs for anyone holding the link — removal from search results does not remove the pages from the web.instagram+1

Google spokesperson Ned Adriance said in a statement during the earlier incident that "neither Google nor any other search engine controls what pages are made public on the web". Anthropic had not issued a public statement about the July 2026 recurrence at the time of reporting. Users can review and revoke their shared conversations under Settings, then Privacy, then Shared Chats.claude+2