Hundreds of Claude AI Conversations Exposed in Google Search — Including Crypto Keys and Personal Data

The robots.txt vs. noindex conflict

Anthropic applied two layers of indexing control on shared chat pages:

1. A

   Disallow: /share/*

   rule in their robots.txt file, telling crawlers not to access the /share/ path.
2. An

   X-Robots-Tag: noindex

   HTTP header on the pages themselves, telling search engines not to index them even if they were crawled .

The conflict: Because robots.txt blocked Google's crawler from accessing the pages entirely, Google's crawler never saw the noindex header. However, if the URLs were linked elsewhere on the web (e.g., on social media, forums, or other sites that Google could crawl), Google could still discover and index the URLs based on those external references. When the crawler is blocked by robots.txt from fetching a page, it cannot read the noindex directive — so it may index the URL from external context alone . Essentially, the robots.txt disallow made the noindex tag invisible and therefore ineffective.

Comparison to earlier incidents (OpenAI, xAI, and prior Anthropic)

Key pattern: In all three cases, the root cause is that AI companies' "share" features generate public, guessable URLs, and users post those links on the open web — after which search engines index them. Anthropic's 2025 incident was essentially the same issue .

Current indexing status (as of July 26–27, 2026)

• Google: Indexed ~600 shared conversation URLs before they began disappearing from search results . As of this writing, many results were still accessible via direct search, though some had been removed .
• Bing: Also indexed shared Claude conversation URLs, discoverable via the same site: queries .
• Brave Search: Users reported that Brave was still returning shared Claude conversations in search results as of July 26 .

Google had previously estimated it indexed "just under 600" Claude conversations in the prior incident before they were removed . The current status is in flux — Anthropic had not publicly addressed the matter at the time of reporting .

How to review and revoke shared conversations

Anthropic's official help center provides these steps:

Review your shared chats:

1. Go to Settings > Privacy in your Claude account.
2. In the Privacy settings section, click Manage next to Shared links .
3. This displays a log of all your currently shared conversations.

Unshare (revoke) a chat:

1. Open the conversation and click the Share menu.
2. Click the visibility dropdown and change it from "Public" to "Private" .
3. This disables the direct link immediately.

Delete a conversation entirely:

1. From your Claude dashboard, delete the conversation from your history.
2. This immediately removes it from your account and automatically stops sharing .

Note: Unsharing or deleting a conversation does not automatically remove it from search engine caches. You may also need to submit removal requests to Google, Bing, and Brave separately for any URLs already indexed .