A Reddit user recently found that entering the search command “site:claude.ai/share” in Google could surface hundreds of Claude conversation records, exposing more than 200 conversations across at least 25 pages of search results, with some conversations appearing weeks earlier. Anthropic has added a noindex tag, and Google removed the related search results around July 26.
Types of leaked content: crypto wallet credentials, clinical trial patient data, and unreleased product plans
(Source: Reddit)
After testing, netizens found that the leaked Claude chats included various types of sensitive personal and enterprise information:
· Cryptocurrency wallet credentials
· Suspected Social Security numbers
· Legal consultation and health records (including full names, ages, genders, races, and treatment dates of clinical trial patients)
· Internal company documents (payroll spreadsheets, CRM system conversation logs, and unreleased product plans)
· Children’s names and phone numbers
· Location data (a “location data collection” database that may include addresses and apartment access codes)
Om Patel (founder of BigIdeasDB) added that the leak was not limited to conversation records, but also included interactive mini-apps and documents generated by Claude’s “Artifacts” feature.
Root cause: missing noindex tags and limitations of robots.txt
The direct cause of this leak was that the Claude share pages lacked the “noindex” tag. Anthropic had already set robots.txt rules as of September 2025 telling search engine crawlers not to access share links, but that wasn’t enough: according to Google developer documentation, if a webpage is linked by other websites, for Google to decide whether to index it, the webpage itself must include the noindex tag or a noindex equivalent must be added via the response header using x-robots-tag to truly block indexing.
After reviewing the leaked pages, the outlet Wired confirmed that these pages indeed did not include the noindex tag; this also explains why some search results show “No information available for this page”—Google knows the link exists but cannot read the page content. The same issue also appears on Claude’s public Artifacts pages.
Fix status and the problem of permanent archiving: 453 conversations have been archived
(Source: Claude)
Anthropic has added the noindex tag, and Google began removing Claude-related search results around July 26; however, as of the time this was submitted, Bing could still find some content. Even more irreversibly, a GitHub repository named “Shared-Claude-Chats” has been permanently archived containing 453 Claude conversations and 519 Grok conversations, for a total of 11,241 messages, with all of them stored as plain text.
This incident is not the first: ChatGPT also experienced almost the same situation 11 months earlier (“Make this conversation discoverable” led thousands of conversations to be indexed by search engines; the feature was later removed); and last year Anthropic had a similar case involving about 600 conversations indexed by Google.
FAQ
What is the direct technical cause behind the Claude conversation leak?
The direct cause is that the Claude share pages are missing the “noindex” tag. Although Anthropic had set robots.txt starting in September 2025, according to Google developer documentation, for pages that have been linked by other websites, Google needs the page itself to include the noindex tag in order to fully block search indexing. After reviewing the leaked pages, Wired confirmed that these pages lacked the tag. Anthropic fixed the issue by adding the noindex tag after the incident.
Even if Anthropic fixed it, have the leaked conversations been permanently saved?
Yes. On GitHub, the repository named “Shared-Claude-Chats” has archived 453 Claude conversations and 519 Grok conversations, totaling 11,241 messages, permanently stored in plain-text form; in addition, as of the time of reporting, Bing still shows some content in search results. Users can manage shared conversations in the privacy settings section within Claude, but archived content cannot be deleted this way.
How did Anthropic and Google respond to this incident?
Anthropic spokesperson Amie Rotherham said that share links aren’t guessable; if users choose to share, it amounts to making it public—just like other public internet content, third parties may save it. Google spokesperson Ned Adriance said that search engines can’t control which pages are made public on the internet; Google provides clear tools for site owners to decide whether pages should be indexed, and it has always complied with these settings.
