A Reddit user ran a simple Google search on July 25 and discovered something alarming. Hundreds of Claude conversations were publicly indexed and readable by anyone. The query “site:claude.ai/share” returned pages of results containing medical records, cryptocurrency wallet credentials, company strategy documents, children’s school essays, and employee reviews.
You can view a lot of shared conversations via Google.
by
u/-void1 in
ClaudeAI
Claude’s “share” feature generates a public link when users choose to share a conversation. Anthropic’s robots.txt file blocked crawlers from accessing those URLs directly. But that protection had a critical flaw. Google’s own documentation explains that blocking a crawl does not prevent indexing if the URL appears elsewhere on the web. Without a noindex meta tag on the share pages themselves, any link posted on Reddit, social media, or a forum became discoverable by search engines.
Claude Artifacts, the interactive apps, documents, dashboards, and tools users build inside Claude, were also indexed. Axios independently verified that shared Artifacts appeared in Google results, including a plan opposing the dissolution of a Miami city agency and a university academic calendar document.
Anthropic’s response was firm but controversial, saying the system worked as intended. Spokesperson Amie Rotherham stated that Anthropic does not share chat directories or sitemaps with search engines. She added that shareable links “are not guessable or discoverable unless people choose to share them themselves.” But users widely interpreted “Anyone with the link” as equivalent to an unlisted YouTube video, not as content eligible for public indexing.
When asked Google to comment, they shared that:
Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines. We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives.
People also took to Reddit to express their concerns. One comment read:
Comment
by
u/marketrent from discussion
in
technology
The damage was already done before the fix arrived. Someone archived 11,241 exposed conversations to GitHub. The content included apparent Social Security numbers, legal discussions, and one chat labeled “shared by Anthropic” showing Claude generating explicit content against the company’s own policies.
Anthropic updated its configuration and added noindex tags. Google began pulling results by July 26. By July 28, the shared conversations were no longer discoverable through search. But cached versions may persist on third-party services for weeks.
In 2025, a researcher scraped approximately 100,000 shared ChatGPT conversations using a similar technique. Meta faced its own exposure when users accidentally published AI conversations, audio clips, and images to public feeds in June 2025. The pattern repeats because every major AI platform treats “share” as a public action while users assume it means private distribution.
For anyone relying on Claude for business documents, legal research, and financial planning, the incident is a direct warning. Review active shared links in Claude’s settings immediately. Revoke access to any conversation containing sensitive information. Assume that anything shared through a public link can be crawled, cached, and archived permanently by third parties.
