According to Decrypt, a configuration flaw in Anthropic's Claude chat sharing feature—caused by missing noindex tags—allowed user conversations to be indexed by Google and publicly searchable on July 25. A Reddit user discovered hundreds of complete conversations exposing sensitive data including cryptocurrency wallet seed phrases, social security numbers, and legal discussions.
The root cause: shared links lacked noindex meta tags, enabling Google to index pages despite robots.txt restrictions. The vulnerability also affected public Artifacts, leaking employee salary information and internal product roadmaps. Google began removing indexed results on July 26, though Bing continues indexing them. Users can revoke sharing links through settings, but previously exposed data cannot be deleted.