Anthropic Fixes Claude Privacy Bug That Exposed Shared AI Chats to Search Engines

Anthropic has updated the server configuration for its artificial intelligence assistant, Claude, resolving a web crawler exposure that allowed search engines to publicly index thousands of private user conversations.

The issue was highlighted by users on Reddit after they discovered that shared conversation links generated by the platform were being parsed and indexed by major search engines. By entering targeted search queries using the domain parameter site:claude.ai/share, anyone could query Google and pull up transcripts of conversations created across the platform.

The flaw did not result from an external attack or database breach, but rather from a missing search engine instruction within Claude’s web architecture. Anthropic had not configured shared chat pages with directives like noindex, which instruct web crawlers from Google, Bing, and other indexing services to ignore specific web pages.

While many exposed records contained routine prompts, researchers and users identified multiple chats containing highly sensitive data. Exposed content included proprietary corporate information, financial records, internal legal strategy, and personal health or mental wellness inquiries submitted to Claude.

Although users consciously generated public links to share specific conversations with individuals or colleagues, most were unaware that generating a link rendered the entire transcript searchable worldwide. Data privacy organizations, such as the Electronic Frontier Foundation, have consistently warned about the privacy risks associated with public link generation features in generative artificial intelligence services, particularly regarding compliance with frameworks like the General Data Protection Regulation.

Hours after the indexing issue spread online, Anthropic deployed a fix to block search engine crawlers from reading shared link endpoints. Google subsequently began purging the indexed pages from its results database, though lingering records remained briefly visible on alternative engines such as Bing and Brave Search.

Users who previously generated public links for their chats can revoke access directly within the platform by navigating to the share menu on any shared conversation and selecting “Keep private”.