Some Claude Chats Are Searchable on Google
Refract AI Intelligence Digest
BLUF
Publicly indexable Claude chats are leaking highly sensitive personal and financial data via Google search results.
NEWS
Security researchers discovered chat logs containing cryptocurrency wallet keys, medical billing data, and home addresses appearing in Google searches. The exposure stems from user-configured settings that allow conversation sharing, despite Anthropic's assertion that they do not share data by default.
Why I Care
This compromises user privacy and financial security, potentially enabling identity theft or crypto theft from anyone using the platform without strict privacy controls.
Next Steps
Users must audit their Claude account settings to disable public sharing immediately and delete any sensitive past conversations.
And it’s personal information (alternate link):
The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses.
What seems to be the issue is a user setting about data sharing. Anthropic’s position is that it’s not their problem:
“We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google,” the company said in a statement. “These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services.”...
Source: Schneier on Security ·