Claude shared chats and Artifacts were publicly searchable on Google — here’s what happened

An untold number of Claude chats and Artifacts — the interactive mini apps and documents users can build inside Anthropic’s AI assistant — were found publicly searchable on Google over the weekend. Reddit users discovered that typing search operators like site:claude.ai/share into Google surfaced a long list of shared conversations, some reportedly containing health records, private company documents, and the names and phone numbers of children.

How the exposure happened

The issue appears to have originated from Claude’s ‘share chat’ feature, which allows users to create links that enable anyone with the assigned URL to view a conversation or project. Claude’s interface warns: ‘Anyone with the link can view.’ The language clearly implies the feature is intended for sharing with friends, colleagues, and small groups — not the entire internet. Google Docs offers a similar feature, and those documents don’t end up publicly accessible on Google.

A screenshot of Claude’s ‘share chat’ feature, when the user chooses the ‘Keep private’ option.

A screenshot of Claude’s ‘share chat’ feature, when the user chooses the ‘Create public link’ option.

Anthropic’s response

Anthropic appeared to blame users for the exposure. When asked about what happened, the company told Bitcoin World that share links only appear in search results when they’ve been posted somewhere search engines can see, like a forum or social media post; it added that a link sent privately to someone stays out of search. Spokeswoman Amie Rotherham added in an explainer: ‘We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google. These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services.’

The issue was first flagged by a Reddit user on Saturday and was first reported by 404 Media on Monday morning. As of Monday afternoon, a test search by Bitcoin World on Google following the method outlined in the Reddit post does not return any results, suggesting that the exposure has somehow been remediated.

What was exposed

Before the issue was fixed, Futurism reported finding ‘a detailed medical report of a real patient, clinical trial results that included patient names, documents sharing the names and phone numbers of primary school-aged children, company documents marked for internal use only, and employee reviews that included personal information about workers.’ Exposed Artifacts included code and work notes, along with erotica generated by the chatbot. In at least one case, Fortune reported, a chat labeled ‘shared by Anthropic’ showed Claude producing explicit content, which would be a violation of the company’s own policy against generating erotica.

Previous incidents

Last year, Forbes reported a similar issue in which hundreds of Claude chats were indexed by search engines — at the time, Google estimated it had indexed just under 600 conversations before the pages disappeared from search results. How closely the current exposure tracks that scale hasn’t been independently confirmed, though multiple users reported finding shared conversations through the same type of Google search query used to surface last year’s cache. Also last year, 404 Media reported that a researcher was able to scrape around 100,000 ChatGPT conversations that had been set to be shared publicly.

Google’s position

Google spokesperson Ned Adriance told Bitcoin World that ‘Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines. We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives.’

How to check your shared chats

To review which Claude chats you set to have a public link, go to Settings → Privacy → Shared Chats. This allows you to see which conversations have been shared and revoke access if needed.

Why this matters

The incident highlights a recurring privacy challenge with AI chatbots: the gap between user expectations and the actual visibility of shared content. While Anthropic’s interface warns that shared links are public, many users may not realize that posting a link on a public forum — or even a semi-public platform — can make the content discoverable through search engines. As AI tools become more integrated into daily work and personal life, the potential for accidental data exposure grows. Users should treat any shared AI conversation link as a permanent public record, even if the interface suggests otherwise.

FAQs

Q1: How did Claude chats end up on Google?
Users shared their Claude conversations using the ‘share chat’ feature, which creates a public URL. When those URLs were posted on forums, social media, or other public websites, search engines like Google indexed them, making them discoverable via search.

Q2: Is my data safe if I never shared a Claude chat?
If you never used the ‘share chat’ feature, your conversations are not publicly accessible. The exposure only affects chats that were explicitly shared by users via a public link.

Q3: Has the issue been fixed?
As of Monday afternoon, searches using the method described in the Reddit post no longer return results, suggesting the exposure has been remediated. However, users should still review their shared chats in Settings → Privacy → Shared Chats to ensure no unintended public links exist.