2026-07-27 · 2026-Q3
Google Indexed Shared Claude Conversations and Artifacts, Exposing Medical Records and Internal Documents
Primary layerL8 Output / Destination
Where is this data going, and who chose that?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Unknown
Target
Publicly shared Claude conversations and Artifacts under `claude.ai/share`
Impact
A Reddit user demonstrated on July 25, 2026 that a `site:claude.ai/share` query surfaced large numbers of shared Claude conversations and Artifacts to anyone searching, without the original link ever being handed to them. Reported content included a detailed medical report for a real patient, clinical trial results listing patient names, documents containing the names and phone numbers of primary-school-aged children, company documents marked internal use only, and employee reviews, alongside source code and work notes inside Artifacts. Results stopped appearing in Google by the afternoon of Monday, July 27. Anthropic said shareable links are public by design and are not guessable or discoverable unless users post them somewhere public themselves, and pointed users to the settings page to review and unpublish. A comparable ChatGPT indexing episode in 2025 involved roughly 600 conversations
Root cause
A share feature whose output is a durable public URL, combined with users treating "share" as "send to one person". Once such a link appears anywhere crawlable, a forum post, a social media reply, or a pasted bug report, the full conversation becomes search-indexable, and nothing in the sharing flow conveys that the page is world-readable rather than link-restricted
Sources
Catalog
Cite this: AgentProv incident record: Google Indexed Shared Claude Conversations and Artifacts, Exposing Medical Records and Internal Documents (2026-07-27). https://agentprov.com/incidents/2026-07-27-google-indexed-shared-claude-conversations-and-artifacts-exposing-medical
Related
- Also L8 · 2026-10-01A Read-Only Grok Bot "CFO" Agent Posted a CEO's Bank Balances to the Company SlackL8Output / Destination
- Also L8 · 2026-09-29"PixelLeak": AI Coding Agents Posted 13,000+ Internal Screenshots From 300+ Organizations to Public GitHub RepositoriesL8Output / Destination
- Also L8 · 2026-09-22Z.ai's ZCode Coding Agent Uploaded Entire Local Repositories, Git History Included, to Alibaba Cloud by DefaultL8Output / Destination