- Published on
Security firm exposes Google search can find Claude's public chats, risking sensitive data leaks
- Authors
- Name
- DeepHorus
Security firm Malwarebytes recently issued a notice stating that shared conversations from Anthropic's AI assistant Claude may be indexed by Google Search, leading to accidental exposure of users' sensitive information. This discovery has raised concerns about privacy protection mechanisms in AI chat.
According to the notice, the security incident was initially brought to light by some Reddit users. Through specific search methods, they could find a large number of Claude shared conversation records in Google search results. These records appeared ordinary but could contain users' private communications.
The investigation showed that the issue stems from Claude's "shared chat" feature. According to Anthropic's official explanation, this feature generates a public access link for conversations users choose to share and sets the conversation status to "Public." Malwarebytes found that some publicly shared chat records can be crawled and indexed by search engines, eventually appearing in search results.
This means that once a user shares a conversation containing personally identifiable information, account passwords, or corporate secrets, anyone can find and view these contents through search engines. For privacy-conscious users, this undoubtedly poses a serious data breach risk.
Malwarebytes stated that this is not a problem unique to Claude. The company previously discovered that Grok's shared chat records also appeared in Google search results, and Meta AI has experienced similar situations in the past. It is evident that this phenomenon is somewhat common among AI tools.
In response to this issue, Malwarebytes pointed out that it is not easy to completely prevent public web links from being indexed by search engines. To prevent sensitive information from leaking through AI shared conversations, the simplest and most effective method is to avoid publicly sharing AI chat content with others, and to avoid entering confidential content such as personally identifiable information, account passwords, and corporate secrets in AI conversations.
With the increasing popularity of AI chat tools, users should also be vigilant about privacy risks while enjoying convenience. Security experts recommend that when using such tools, users should keep conversations private by default and use the sharing feature cautiously to protect the security of personal and corporate information.
