FULL STORY
Claude Code Email Leak Claim Traced to Server-Side Headers
A GitHub issue claimed Claude Code leaked user emails during web searches, sparking Hacker News debate. mitsuhiko quickly traced the leak to server-side headers, debunking the client-side theory within a day.
2026-11-06 ~ 2026-11-06 · 2 episodes · 5 posts
Episode 1 · Claude Code Accused of Leaking User Emails in User-Agent Header (2026-11-06, 2 posts)
A GitHub bug report alleges that Claude Code embeds the user's email in the User-Agent header during web searches, exposing it to third parties; the reporter says they now receive dozens of scam emails daily.
- Claude Code bug leaks user email via User-Agent header, victim reports dozens of scam emails daily — niloofar_mire · 2026-11-06
- Claude Code leaked users' emails via User-Agent header during web searches — NousResearch · 2026-11-06
Episode 2 · Mitsuhiko Traces Email Leak to Claude Model Itself, Not Claude Code (2026-11-06, 3 posts)
After users blamed Claude Code for leaking emails in HTTP headers, mitsuhiko traced the leak to the Claude model itself, which pulled the address from Cargo.toml.
- Not Claude Code: the Claude model itself leaks your email from Cargo.toml, finds mitsuhiko — mitsuhiko · 2026-11-06
- Claude Models Send Your Email to Websites—mitsuhiko Traces It to Cargo.toml — mitsuhiko · 2026-11-06
- Claude models put your email in headers — they found it in Cargo.toml — mitsuhiko · 2026-11-06