Hundreds of conversations between users of Claude AI, the chatbot developed by Anthropic, were temporarily accessible through internet search engines, raising fresh concerns about the privacy of AI chatbot interactions.
According to reports, the issue involved conversations that users had voluntarily shared using Claude's share link feature. These publicly accessible links were later indexed by search engines, including Google, making them discoverable through specific search queries.
The issue came to light after Reddit users identified publicly accessible Claude conversations in search results. Reports indicated that more than 200 shared chats appeared across at least 25 pages of search listings, with some conversations dating back only a few weeks.
The exposed conversations covered a wide range of topics. Some users had asked personal questions, while others sought professional advice or uploaded resumes containing names, contact information, and employment details. Other chats reportedly included unpublished cloud security material, company planning documents, healthcare-related research, and additional sensitive information.
Anthropic said that users have full control over whether they choose to share their conversations and that shared links become publicly accessible only after users intentionally create them. However, the company acknowledged that users were not explicitly informed that these shared conversations could also appear in search engine results.
Following the reports, Anthropic implemented technical measures to remove the indexed chat links from search results. Google, meanwhile, stated that search engines do not determine whether a webpage is public; instead, website owners control whether their pages can be indexed, and Google follows those instructions.
Cybersecurity experts say the incident highlights the importance of exercising caution when using AI chatbots. Users are advised to avoid sharing sensitive personal, financial, medical, or confidential business information through AI platforms unless they are certain the content will remain private.
