Claude Share Links Expose Medical Records in Google Search

Anthropic's Claude has a share button, and this weekend Redditors noticed it was doing a lot more sharing than users had signed up for. Futurism reports that a trove of chat logs and projects created with Claude, some of them containing sensitive personal and company information, ended up exposed to Google.

The examples Futurism lists are the uncomfortable kind. A detailed medical report of a real patient. Clinical trial results that included patient names. Documents sharing the names and phone numbers of primary school-aged children. Company documents marked for internal use only. Employee reviews that included personal information about workers. All of it reachable by typing the right query into a search box.

The mechanism, as the piece describes it, is that clicking Claude's share button creates a public link where anyone with the link can view the conversation, and the interface warning failed to mention that shared content could wind up being indexed by a search engine. Anthropic's own line, quoted in the article, is that shareable links are 'not guessable or discoverable unless people choose to share them themselves.' Technically true, in that the user did click share. Awkward, given that Google is now doing the discovering.

This is not the first time. Futurism notes that Forbes reported last year that hundreds of Claude chats had been indexed by search engines, prompting Anthropic to scrub the chats from the web, and that OpenAI and xAI have been in similar spots with ChatGPT and Grok logs. The honest caveat is that the reporting does not put a number on how many chats are exposed this round, or say whether enterprise-tier accounts are affected or only consumer users, or whether the chats have been scrubbed again.

The bigger question for anyone piloting Claude on real customer, patient, or HR data is whether a share button should exist at all in those tiers. Vendors keep repeating this failure mode. Buyers are going to have to stop trusting the default and start auditing what leaves the tenant.