Anthropic’s link-sharing feature for Claude conversations was reportedly crawled and indexed by major search engines, exposing chats that users had assumed were only visible to whoever held the link. The stakes are immediate: shared conversations can contain anything a user typed into the assistant, from draft contracts to credentials. The underlying cause, per the reporting, is a missing technical instruction rather than a deliberate publishing choice.
The mechanism is mundane and well understood in web infrastructure. A page is crawlable by default the moment it sits at a public URL; the only thing that keeps a search engine from indexing it is an explicit noindex directive in the page’s metadata. According to The Decoder, Claude’s “Share with link” pages apparently lacked that tag, so anything a user shared became eligible for indexing the moment a crawler found it.
Reddit users reportedly located a large number of shared Claude chats by running a site-restricted Google search against Claude’s share-page domain, according to The Decoder. Some of the exposed threads reportedly included cryptocurrency private keys and legal questions. A later update to the same report said user-generated artifacts, including documents and small apps built inside Claude, were discoverable the same way through broader searches of the Claude.ai domain.
The Decoder reported that Anthropic appears to have addressed the issue quickly, since the exposed pages dropped out of Google’s results soon after. The outlet also reported that the same chats stayed visible for longer on Bing and on Brave Search, which suggests a fix at the page level rather than a takedown coordinated across search engines. The Decoder’s account does not describe any public statement from Anthropic, so whether the company acknowledged the incident on the record is not established here.
This is not a new failure mode. OpenAI’s ChatGPT had a nearly identical problem with its own share links last year: pages meant for one recipient turned up in Google, and OpenAI eventually pulled the sharing feature rather than patch around it. The pattern across both companies points to the same root cause, a public URL treated as private by assumption instead of by configuration.
Anyone who has used Claude’s share feature should check Settings, then Privacy, then Shared Chats, and revoke links to conversations containing anything sensitive. Teams building products with a “share by link” option should treat noindex as a default requirement at launch, not a patch applied after a Reddit thread finds the gap.
The Decoder (byline Matthias Bastian) reported this story on July 27, 2026.
