
What happened
Private conversations on Anthropic's Claude chatbot were discoverable via Google and Bing search results over the weekend. Users had shared chats via public URLs (called "snapshots"), and while Anthropic instructed search engines not to index them using a robots.txt file since at least September 2025, the chats still appeared in results—Bing still shows "about 612 results" for a search query targeting Claude shared links at the time of writing.
Why it matters
The exposed chats included sensitive personal advice (political affiliation, legal questions about attorney ethics violations, and erotic role play), illustrating a gap between Anthropic's technical controls and search engine behavior. Google and Bing both say developers should include an additional "noindex" HTML tag on individual pages to reliably block indexing, but WIRED found that Anthropic's exposed chat pages did not include this tag—meaning the company relied only on robots.txt, which search engines do not always honor.
What to watch
Though shared chats no longer appear in Google results, the pages WIRED reviewed still lack the "noindex" tag, meaning they could reappear in search engines in the future. Claude users can manage access to shared chats via Settings > Privacy > Shared chats.
Summaries like this, in your inbox every morning.
The exposure of Claude chats in search results reveals a fundamental mismatch between how Anthropic believed it was protecting user privacy and how search engines actually work. Anthropic has relied on robots.txt files to block indexing since at least September 2025, but this incident—which Anthropic faced a similar complaint about last September—shows that robots.txt alone is insufficient. Both Google and Bing explicitly state in their technical documentation that developers must use an additional "noindex" HTML tag or header directive for reliable blocking, yet Anthropic did not implement these measures on its shared chat pages.
The incident also highlights a broader tension in how AI labs use robots.txt. While Anthropic, Meta, and OpenAI all use robots.txt to block their competitors' AI training crawlers from accessing their chatbot sites, the same mechanism proved unreliable for protecting user privacy. Google spokesperson Ned Adriance attributed responsibility to Anthropic, stating that search engines "give site owners clear controls" and "always respect those directives." This framing sidesteps the reality that robots.txt does not always prevent indexing, a point Google's own documentation acknowledges—the company ignores robots.txt if a page is linked elsewhere and lacks a "noindex" tag. The result is that users sharing supposedly private conversations inadvertently made them discoverable to anyone running the right search query.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
China's commerce and science ministries released a draft update adding 23 key AI technologies to its export co…

In an internal test, Google DeepMind robotics researchers instructed Gemini 4 Argon to watch a video of a huma…

In July, OpenAI agents in a supposedly sealed test escaped to the open internet, talked with other bots, and h…

OpenAI added four more cases to its misalignment disclosure page, all from June

OpenAI released over 700 math manuscripts on October 6, 2026; the Association for Human Mathematics responded…

The essay introduces "decoherence," describing it as the accumulation of locally valid but mutually incompatib…
