Anthropic has confirmed that thousands of conversations shared through Claude's "share" feature were inadvertently indexed by Google and other search engines, exposing private chats that users believed were only accessible to people holding a direct link.
What Went Wrong
The problem stemmed from a missing technical safeguard. When users clicked Claude's "share with a link" button, the resulting pages lacked instructions telling search engine crawlers to stay away. As a result, "share with a link" and "searchable by anyone on the internet" ended up meaning the same thing.
Websites typically use a small piece of code—commonly a "noindex" directive—to prevent search engines from cataloging specific pages. Without it, Google and other crawlers were free to sweep up the shared Claude conversations and surface them in ordinary search results.
A single absent line of code turned private link-sharing into public broadcasting.
The scale of the exposure became clear when someone archived 11,241 of those shared messages to GitHub, preserving the conversations even if the original pages were later removed or de-indexed. That means the leaked content may persist regardless of any cleanup effort.
Why It Matters
Share buttons have become a routine part of AI chat interfaces, letting people pass along useful exchanges to colleagues or friends. Many users reasonably assume that a shared link stays contained within the group they choose to send it to.
This incident underscores how easily that assumption can break down. Conversations with AI assistants often contain sensitive material—personal details, business information, or private questions users would never expect to see indexed on a public search engine.
- Shared links were crawlable by search engines by default
- More than 11,000 messages were saved to a public GitHub repository
- Archived copies may remain accessible even after de-indexing
The episode is a reminder for anyone using AI chatbots to treat "shareable" content with caution. Until platforms guarantee that shared links remain genuinely private, users should assume anything they publish through a share feature could end up searchable—and permanently archived—somewhere online.