Some Claude Chats Are Searchable on Google

And it’s personal information (alternate link):

The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses.

What seems to be the issue is a user setting about data sharing. Anthropic’s position is that it’s not their problem:

“We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google,” the company said in a statement. “These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services.”

Here’s how to fix it.

Posted on August 4, 2026 at 6:13 AM2 Comments

Comments

lurker August 4, 2026 2:35 PM

Google wouldn’t be using AI to find this stuff, would they?

[A] Google dork — a super specific search that is useful for finding particular webpages or files —

I had always thought that “dork” was Antipodean slang, but OED tells me it’s North American; and yes, the first meaning absolutely fits Google now:

a contemptible, socially inept person

To fit the second meaning to Google would be an insult to all men.

Clive Robinson August 4, 2026 2:58 PM

@ Bruce, ALL,

I wonder how much people are actually thinking about,

“The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded

When all is said and done “vibe-coding” is very far from “unique”.

In fact in many ways it’s “duplicate plaintext” across many projects.

Which brings,

“and in keeping with our privacy principles, we do not share chat directories or sitemaps”

Into a level of irrelevance of “PR Nonsense” or misdirection.

Then we have,

“These shareable links are not guessable or discoverable unless people choose to share them themselves.”

Is clearly untrue due to what is in effect “common plaintext” from the “vibe-coding” and similar processes.

Thus the question becomes how long before “common plaintext” from “upstream processes” becomes a “give away” for attackers of “downstream processes” that need to be secure but…

Leave a comment

Blog moderation policy

Login

Allowed HTML <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre> Markdown Extra syntax via https://michelf.ca/projects/php-markdown/extra/

Sidebar photo of Bruce Schneier by Joe MacInnis.