AIToday
Large Language ModelsAI Safety & AlignmentWIRED AIPublished: Jul 28, 2026, 06:00 JST

Claude chats exposed in Google, Bing search results

Claude chats exposed in Google, Bing search results

3 Key Points

  1. What happened

    Private conversations on Anthropic's Claude chatbot were discoverable via Google and Bing search results over the weekend. Users had shared chats via public URLs (called "snapshots"), and while Anthropic instructed search engines not to index them using a robots.txt file since at least September 2025, the chats still appeared in results—Bing still shows "about 612 results" for a search query targeting Claude shared links at the time of writing.

  2. Why it matters

    The exposed chats included sensitive personal advice (political affiliation, legal questions about attorney ethics violations, and erotic role play), illustrating a gap between Anthropic's technical controls and search engine behavior. Google and Bing both say developers should include an additional "noindex" HTML tag on individual pages to reliably block indexing, but WIRED found that Anthropic's exposed chat pages did not include this tag—meaning the company relied only on robots.txt, which search engines do not always honor.

  3. What to watch

    Though shared chats no longer appear in Google results, the pages WIRED reviewed still lack the "noindex" tag, meaning they could reappear in search engines in the future. Claude users can manage access to shared chats via Settings > Privacy > Shared chats.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The exposure of Claude chats in search results reveals a fundamental mismatch between how Anthropic believed it was protecting user privacy and how search engines actually work. Anthropic has relied on robots.txt files to block indexing since at least September 2025, but this incident—which Anthropic faced a similar complaint about last September—shows that robots.txt alone is insufficient. Both Google and Bing explicitly state in their technical documentation that developers must use an additional "noindex" HTML tag or header directive for reliable blocking, yet Anthropic did not implement these measures on its shared chat pages.

The incident also highlights a broader tension in how AI labs use robots.txt. While Anthropic, Meta, and OpenAI all use robots.txt to block their competitors' AI training crawlers from accessing their chatbot sites, the same mechanism proved unreliable for protecting user privacy. Google spokesperson Ned Adriance attributed responsibility to Anthropic, stating that search engines "give site owners clear controls" and "always respect those directives." This framing sidesteps the reality that robots.txt does not always prevent indexing, a point Google's own documentation acknowledges—the company ignores robots.txt if a page is linked elsewhere and lacks a "noindex" tag. The result is that users sharing supposedly private conversations inadvertently made them discoverable to anyone running the right search query.

FAQ
How did private Claude chats end up in search results?
Anthropic users share chats by creating public URLs called "snapshots." Anthropic told search engines via robots.txt not to index these pages, but Google and Bing both say developers must also add a "noindex" HTML tag on individual pages for reliable blocking. WIRED found that Anthropic's shared chat pages lacked this tag.
What kind of information was exposed?
The exposed chats included sensitive personal conversations: advice about what political party to join, legal questions about whether attorneys in Kansas must self-report ethical violations, and erotic role play.
Can this happen again?
Yes. Although shared chats no longer show up in Google results, WIRED found that the pages still lack the "noindex" tag, meaning they could potentially reappear in search engines in the future.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleClaude shared chats exposed on Google search