Skip to content
AgentProv

2026-07-27 · 2026-Q3

Google Indexed Shared Claude Conversations and Artifacts, Exposing Medical Records and Internal Documents

Where is this data going, and who chose that?

The question layer 8 asks, and failed here.
Fixable
Vendor patch
Vendor response
Patched
In the wild
Yes
Actor
Unknown

Target

Publicly shared Claude conversations and Artifacts under `claude.ai/share`

Impact

A Reddit user demonstrated on July 25, 2026 that a `site:claude.ai/share` query surfaced large numbers of shared Claude conversations and Artifacts to anyone searching, without the original link ever being handed to them. Reported content included a detailed medical report for a real patient, clinical trial results listing patient names, documents containing the names and phone numbers of primary-school-aged children, company documents marked internal use only, and employee reviews, alongside source code and work notes inside Artifacts. Results stopped appearing in Google by the afternoon of Monday, July 27. Anthropic said shareable links are public by design and are not guessable or discoverable unless users post them somewhere public themselves, and pointed users to the settings page to review and unpublish. A comparable ChatGPT indexing episode in 2025 involved roughly 600 conversations

Root cause

A share feature whose output is a durable public URL, combined with users treating "share" as "send to one person". Once such a link appears anywhere crawlable, a forum post, a social media reply, or a pasted bug report, the full conversation becomes search-indexable, and nothing in the sharing flow conveys that the page is world-readable rather than link-restricted

Sources

Catalog

Cite this: AgentProv incident record: Google Indexed Shared Claude Conversations and Artifacts, Exposing Medical Records and Internal Documents (2026-07-27). https://agentprov.com/incidents/2026-07-27-google-indexed-shared-claude-conversations-and-artifacts-exposing-medical