Tons of Peoples’ Claude Chats and Creations are Exposed on Google

A Google search dork has exposed thousands of Claude users' private chats and creations, including cryptocurrency wallet keys, personal addresses, and medical billing data, according to a 404 Media report. Anthropic has not commented on the exposure, which mirrors a similar ChatGPT data leak last year. The exposed content includes AI-powered therapy apps, meeting notes, and dashboards, with some chats still accessible via direct links even after Google removal.

Claude is exposing a wealth of users’ chats and creations in Google search results, meaning anyone can dig through conversations or other material that people used Claude to make but may not have realized were publicly available for strangers to see. The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses Anthropic did not immediately respond to a request for comment. Do you work at Anthropic? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co. Like other chatbots, Claude lets people share their conversations with others by creating a publicly accessible link of the chat. People may do this to send the full text of a conversation to their friends or coworkers in a group chat, for example. But they may not realize Google is also surfacing these links in search results, making them available to essentially anyone. One Google dork — a super specific search that is useful for finding particular webpages or files — surfaced Claude chats, according to this post https://www.reddit.com/r/ClaudeAI/comments/1v6fiyj/you can view a lot of shared conversations via/?ref=404media.co on the Claude subreddit. At the time of writing, that Google dork appears to have been mitigated. No results appeared when 404 Media tested it, on both Google and DuckDuckGo. The post said some of the surfaced chats included API keys, login credentials, and personal information like names, addresses, and phone numbers. Claude also offers Artifacts, which are interactive work spaces for trying out vibe-coded apps or other tools. A Google dork for surfacing them is still working at the time of writing. The data exposure is similar to one that impacted OpenAI’s ChatGPT last year, in which nearly 100,00 ChatGPT conversations were searchable https://www.404media.co/nearly-100-000-chatgpt-conversations-were-searchable-on-google/ on Google. A researcher was able to scrape those exposed chats, meaning that even if Google or Anthropic works to remove the Claude search results, third parties may have already grabbed their content. And it is still possible to view exposed chats even if they’re removed from Google results if you have the direct link itself. Forbes reported https://www.forbes.com/sites/iainmartin/2025/09/08/hundreds-of-anthropic-chatbot-transcripts-showed-up-in-google-search/?ref=404media.co the same thing happened with Claude last year too. Claude users can change their privacy and sharing settings https://support.claude.com/en/articles/10593882-share-and-unshare-chats?ref=404media.co to make their chats no longer publicly accessible.