What started as a leak of shared Claude chats has turned into something much bigger — and much worse. The same thing is now happening with Claude Artifacts, the feature people use to publish apps, dashboards, and documents.
Everything people built and shared publicly is being indexed and listed by Google, meaning anyone can search and find them.
What’s showing up online
People have already found:
Internal company dashboards
Full project plans with client details
Clinical trial summaries containing real medical data
And think about what people actually build in Artifacts:
Financial models, cap tables, and revenue spreadsheets
Payroll and salary breakdowns with employee names
Customer lists and CRM exports
Internal wikis, roadmaps, and unreleased product plans
Legal documents and contracts in progress
Personal health and medication trackers
Tax documents and bank statements
Dashboards containing API keys or environment variables
When you publish an Artifact, you only see two options: “Only me” or “Anyone with the link.” Nobody expects that to mean “and Google will list it publicly.” It’s like an unlisted YouTube video suddenly showing up in search results.
It’s spreading fast
It’s not just Google anymore. Third‑party sites have started scraping and organizing these pages into collections. Even if you delete your Artifact from Claude, copies may still exist elsewhere.
If you’ve ever published an Artifact, go check your published list now and unpublish anything you don’t want public.
The same privacy flaw in shared chats
Claude’s Share Chat feature has the same issue. When you share a chat, it creates a public link — and those links are being indexed too. So “anyone with the link” has become “anyone who searches.”
People have found:
API keys, credentials, and crypto wallets
Resumes with real names, addresses, and phone numbers
Lawyers discussing ethics cases
Engineers sharing internal project details
Social security numbers
Deeply personal conversations never meant to be public
Anthropic never added a noindex tag to those pages, so search engines freely crawled them. One line of code could have prevented all of this.
This happened before
OpenAI had the same problem about a year ago. They patched it quickly. Anthropic hasn’t yet.
What you should do
If you’ve ever hit Share on a Claude chat or Artifact:
Go to Settings → Privacy → Your Data → Shared Chats → Manage.
Delete anything you don’t want the entire internet to see.
Check your Published Artifacts and unpublish sensitive ones.
Bottom line
Claude has a serious privacy problem right now. A huge number of shared conversations and artifacts are publicly indexed and searchable. Until Anthropic fixes this, treat every shared link as fully public.
No comments:
Post a Comment