AI
Private Claude Conversations Leaked Through Search Engines Despite Company Safeguards
Shared Claude chat URLs containing sensitive personal information have been appearing in Google and Bing search results, revealing a gap between Anthropic's protective measures and what search engines actually index.
WIRED — AI
When users create shareable links to Claude conversations, they typically assume the content remains reasonably private. But a recent discovery exposed how these chats—some containing deeply personal queries and intimate exchanges—were surfacing in Google and Bing search results.
The issue came to light after a Reddit user flagged Claude discussions that had been indexed by major search engines. The exposed conversations ranged from political advice to confidential legal questions about attorney ethics in Kansas, along with explicit role-play exchanges.
How Anthropic Tried to Block Indexing#
Anthropic has instructed web crawlers not to index shared chat URLs using a robots.txt file—the standard mechanism websites have relied on for decades to communicate with search bots. The company implemented this approach at least as far back as September 2025, according to archived snapshots of the file.
However, a straightforward robots.txt directive isn't enough to guarantee pages stay out of search indexes. Both Google and Bing require additional safeguards.
The Missing Piece: Proper Indexing Tags#
WIRED's review of exposed Claude pages revealed they lacked a critical noindex HTML tag on individual pages—a tool both search engines say they respect when deciding whether to include pages in results. Google's own documentation states the company ignores robots.txt instructions if a page is linked from elsewhere online and doesn't include this explicit tag. Bing similarly recommends developers add the tag for extra assurance.
By the time researchers examined the leaked chats, some had been removed, and Google searches no longer surface them. Bing, however, still showed roughly 612 results for the relevant shared chat domain at the time of reporting.
Responsibility Splits Between Players#
Google spokesperson Ned Adriance pushed back on claims the search engine bore responsibility, telling WIRED that site owners control whether pages are public and that Google always respects indexing directives when properly implemented. Anthropic did not respond to repeated requests for comment about why it failed to add the noindex tag.
This isn't the first time the issue surfaced—Anthropic faced similar criticism last September. At that point, the company told Forbes it relied on , without acknowledging that this method alone has known limitations.

