Google Exposes User Private Keys and Company Secrets in Claude Link Configuration Failure
Anthropic’s Claude AI recently faced a serious privacy breach: numerous user-generated session sharing links were publicly indexed by major search engines like Google and Bing, allowing anyone to view conversation history directly via search. This was not a backend database hack, but a technical configuration error by Anthropic—failing to block search engine crawlers from accessing these links.

The core issue stems from a disconnect between users’ perception of “sharing” and internet reality. Many users assume sharing a link with colleagues or friends is safe, unaware that once the link appears on public websites, forums, or social media, search engine crawlers can follow it and index the content.
Tests revealed that indexed sessions contained sensitive data—wallet private keys, illegal consultation records, internal company tasks, and personally identifiable information—all exposed in search results.
Technical misconfiguration leads to severe consequences: conflicting settings
The root cause was a contradictory technical setup. The /share/ path in Claude’s robots.txt disallowed crawling, yet the page response header also included X-Robots-Tag: none (equivalent to noindex, nofollow). While this seems like a double safeguard, it backfired. Google’s official documentation states that if a page is blocked by robots.txt, crawlers cannot read the noindex tag. As a result, crawlers fail to access the page content but still discover the URL via external links and index it. Users can then click the link to view the full session.
Anthropic has since contacted major search engines to remove the links and updated its strategy to fully block crawling. However, some cached or residual links remain. This is not an isolated incident—many ChatGPT sharing links in 2025 were also indexed by Google, and earlier, Baidu Netdisk’s public sharing feature caused large-scale exposure of user files due to similar issues. After repeated failures, a critical question arises: AI companies emphasize security and privacy, yet fail to manage basic technical configurations. Why should users trust them?
Related article
Alibaba, DeepSeek Drive China’s AI Model Race to Lower Costs
Alibaba has introduced Qwen3.8-Max, its most powerful AI model yet, as DeepSeek’s new V4-Flash gains attention for offering inference pricing lower than several competitors.With 2.4 trillion parameters, Qwen3.8-Max employs a mixture-of-experts archit
Former Spotify Exec Launches Vinyl Bar Startup in Shibuya to Redefine Music Apps
As generative AI continues to reshape the creative landscape, a new wave of startups is empowering users to produce music through AI prompts, mimicking the style of any artist. A Vinyl Bar in Shibuya, a startup with an indie band-inspired name, is de
600B Sparse MoE Activates 27B, Boosting Open-Source Flagship Cost-Effectiveness
Step 5 Preview, the latest flagship foundation model, is now officially available. Its purpose is clear: a primary model engineered for real-world Agentic tasks. It addresses the longstanding "Pareto problem" in AI, where capability, efficiency, and
Related Special Topic Recommendations
Comments (0)
0/500
Anthropic’s Claude AI recently faced a serious privacy breach: numerous user-generated session sharing links were publicly indexed by major search engines like Google and Bing, allowing anyone to view conversation history directly via search. This was not a backend database hack, but a technical configuration error by Anthropic—failing to block search engine crawlers from accessing these links.

The core issue stems from a disconnect between users’ perception of “sharing” and internet reality. Many users assume sharing a link with colleagues or friends is safe, unaware that once the link appears on public websites, forums, or social media, search engine crawlers can follow it and index the content.
Tests revealed that indexed sessions contained sensitive data—wallet private keys, illegal consultation records, internal company tasks, and personally identifiable information—all exposed in search results.
Technical misconfiguration leads to severe consequences: conflicting settings
The root cause was a contradictory technical setup. The /share/ path in Claude’s robots.txt disallowed crawling, yet the page response header also included X-Robots-Tag: none (equivalent to noindex, nofollow). While this seems like a double safeguard, it backfired. Google’s official documentation states that if a page is blocked by robots.txt, crawlers cannot read the noindex tag. As a result, crawlers fail to access the page content but still discover the URL via external links and index it. Users can then click the link to view the full session.
Anthropic has since contacted major search engines to remove the links and updated its strategy to fully block crawling. However, some cached or residual links remain. This is not an isolated incident—many ChatGPT sharing links in 2025 were also indexed by Google, and earlier, Baidu Netdisk’s public sharing feature caused large-scale exposure of user files due to similar issues. After repeated failures, a critical question arises: AI companies emphasize security and privacy, yet fail to manage basic technical configurations. Why should users trust them?
Alibaba, DeepSeek Drive China’s AI Model Race to Lower Costs
Alibaba has introduced Qwen3.8-Max, its most powerful AI model yet, as DeepSeek’s new V4-Flash gains attention for offering inference pricing lower than several competitors.With 2.4 trillion parameters, Qwen3.8-Max employs a mixture-of-experts archit
Former Spotify Exec Launches Vinyl Bar Startup in Shibuya to Redefine Music Apps
As generative AI continues to reshape the creative landscape, a new wave of startups is empowering users to produce music through AI prompts, mimicking the style of any artist. A Vinyl Bar in Shibuya, a startup with an indie band-inspired name, is de
600B Sparse MoE Activates 27B, Boosting Open-Source Flagship Cost-Effectiveness
Step 5 Preview, the latest flagship foundation model, is now officially available. Its purpose is clear: a primary model engineered for real-world Agentic tasks. It addresses the longstanding "Pareto problem" in AI, where capability, efficiency, and





Home






