Claude Shared Chats Indexed by Search Engines Spark Privacy Leak

Recently, Claude's "Share Conversation" feature exposed severe privacy leak risks. A massive number of shared links, originally assumed by users to be private, were indexed by search engines like Google and Brave Search. By simply entering a specific query, anyone could directly read others' chat logs. Although Google has since removed the specifically reported search results, other search engines can still find the content, meaning the privacy隐患 has not been completely eliminated.

Confirmed

Multiple users (such as @void1, @ImaginaryRea1ity, and @paulcal) confirmed that entering the query site:claude.ai/share into search engines easily retrieves a large number of indexed Claude shared chat pages. The exposed conversations contained highly sensitive information. According to @SumitGup and @prasenx, the leaked content involves API keys, login credentials, crypto wallets, resumes, home addresses, phone numbers, internal corporate project documents, and even Social Security Numbers (SSNs). @paulcal also gave an example, noting that one could even find private legal discussions about "whether a Kansas lawyer needs to proactively report an ethics violation."

Furthermore, @pranavmarla pointed out that these Share links are essentially not "private links" but public pages that can be crawled by search engines, and users are not explicitly warned of this risk when sharing. @eyishazyer clarified that this does not mean Google is actively reading users' private chats, but rather that the share pages themselves are publicly accessible. @alexverem also noted that the exact same situation happens with ChatGPT's shared conversations; the sharing feature inherently generates crawlable public pages, which is not a hack.

Unconfirmed

There is currently no official statement explaining exactly why these shared links were crawled and indexed by search engines on such a large scale. Whether it is a flaw in the system's mechanism or another reason, the specific attribution remains to be investigated.

Why it matters

This event directly touches the security baseline of using AI tools. Many users habitually process sensitive personal and business data in conversations. Having shared links indexed by search engines means the risk of privacy leakage has expanded from "targeted leakage" to "publicly searchable network-wide." According to @npinto, although Google fixed the exposed search results within the past 24 hours, other search engines like Brave Search can still find the content. @Mazrael33 further warned that even if these links disappear from search results, they may still remain accessible online for a long time. This means privacy risks are not completely eliminated, and users must remain highly vigilant when using the share feature, opting to unshare directly if they need to ensure complete deletion.

2026-07-26 ~ 2026-07-27 · 12 related posts

Full story(3 episodes)→

Primary sources