Claude Shared Links Indexed by Google Spark Privacy Concerns

Recently, Reddit users discovered that using specific Google search operators (dorks) can directly retrieve a massive amount of Claude users' publicly shared conversation histories and Artifacts pages, bringing privacy leak risks to light.

Confirmed

Public URLs generated by users via the share feature have been indexed by search engines like Google. The scope of exposed content is extensive, encompassing not only standard AI chat logs and creative outputs but also generated apps, documents, and dashboards. More alarmingly, some publicly accessible links contain highly sensitive information, including medical and health records, confidential corporate documents, as well as children's names and phone numbers.

Unconfirmed

According to some Reddit posters, Claude seems to have noticed the issue and is gradually fixing the problem of conversations and Artifacts being crawled by search engines. However, the company has not yet released an official investigation conclusion or a commitment to fully resolve the issue.

Why it matters

The core of this incident is not a capability flaw within the AI model itself, but rather a data discoverability risk introduced by the product's sharing feature. This serves as a stark reminder for users to exercise extreme caution when sharing AI-generated content. It also exposes the inadequacies of AI tools regarding default privacy protections and anti-search engine crawling mechanisms, prompting the industry to re-evaluate the security of public links.

2026-07-26 ~ 2026-07-28 · 13 related posts

Primary sources

1 near-duplicate retellings: rohanpaul_ai