Overview
- Reddit users discovered over the weekend that a site search returned hundreds of Claude share pages, prompting reporters to confirm that many shared conversations and Artifacts were publicly findable.
- Investigations showed the pages lacked a noindex meta tag while relying only on robots.txt, which allowed search engines to index links once they appeared on public forums or social posts.
- Anthropic updated its configuration and added noindex protections and Google began de‑indexing the pages, yet any previously issued share URL remains accessible to whoever holds the link.
- Indexed pages included highly sensitive material such as medical records, clinical trial data, children’s phone numbers, crypto keys, internal company documents, and login credentials, and users are advised to revoke shared links via Settings > Privacy > Shared Chats.
- This episode repeats earlier failures at other chatbot firms and shows a structural design risk: shareable chat links behave like published web pages and require server‑side revocation and archival audits to prevent persistent exposure.