Claude Shared Chats and Artifacts Turned Up in Google Search, Exposing API Keys and Clinical Records

TechCrunch·high signalXBlueskyLinkedInCopy link

Hundreds of Claude conversations shared via the 'share chat' feature became discoverable through Google using site:claude.ai/share queries, surfacing API keys, resumes, financial data, crypto wallet details, and clinical trial records. The share pages lacked noindex tags — Anthropic's robots.txt told crawlers to skip them, but robots.txt does not prevent indexing of URLs discovered elsewhere, and once links spread through forums and social media, Google crawled the full content. Anthropic added noindex tags and Google began pulling results by July 26. The practical lesson for builders shipping any share feature: robots.txt is not an indexing control, noindex is.