An untold number of Claude chats and Artifacts were found publicly searchable on Google over the weekend after a Reddit user noticed that search operators like “site:claude.ai/share” surfaced a long list of shared conversations. Some of the exposed chats reportedly contained health records, private company documents, and names and phone numbers of children.

The exposure stems from Claude‘s “share chat” feature, which lets users create links that allow anyone with the URL to view a conversation or project. The interface warns “Anyone with the link can view,” implying the feature is meant for sharing with friends or small groups—not the entire internet. However, unlike similar features in services like Google Docs, these links ended up indexed by search engines.

Anthropic appeared to blame users for the exposure. The company told TechCrunch that share links only appear in search results when they have been posted somewhere search engines can see (e.g., a forum or social media post), and that a link sent privately stays out of search. A spokeswoman added that Anthropic gives people control over sharing and does not share chat directories or sitemaps with search engines, and that the links are not guessable or discoverable unless users choose to share them. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third parties.

The issue was first flagged on Reddit on Saturday and reported by 404 Media on Monday morning. By Monday afternoon, a test search by TechCrunch no longer returned results, suggesting remediation. Before the fix, Futurism reported finding a detailed medical report, clinical trial results with patient names, documents with names and phone numbers of primary school-aged children, internal company documents, and employee reviews containing personal information. Exposed Artifacts included code and work notes.

In one case, Fortune reported that a chat labeled “shared by Anthropic” showed Claude producing erotica. Anthropic‘s usage policy prohibits sexually explicit content, and getting a chatbot to generate such material through repeated or creatively framed prompting is a known pattern across major AI models. It is not clear from the exposed chat how the content was generated, and Anthropic had not responded to a request for comment on that specific case.

Google spokesperson Ned Adriance noted that Google does not control what pages are made public on the web, and that site owners have clear controls to decide whether pages can be crawled or indexed, which Google respects. Last year, Forbes reported a similar issue where hundreds of Claude chats were indexed; Google estimated about 600 conversations before they disappeared. How closely the current exposure tracks that scale has not been independently confirmed, though users reported finding shared conversations through the same type of query.

Also last year, 404 Media reported that a researcher scraped around 100,000 ChatGPT conversations set to be shared publicly. Anthropic advises users to review which Claude chats have a public link via Settings -> Privacy -> Shared Chats.