The Debrief
L7L14L30L90All
PaidSearchIndustryTechDataBrandConversion
Tech · 2 min read28 July 2026

600 Private Claude Chats Turned Up on Google. Treat the Share Button Like Publishing.

About 600 shared Claude conversations were indexed by Google and Bing this week, exposing resumes, API keys, crypto wallet details and a lawyer's ethics notes. The cause was a missing noindex tag. For any marketing team pasting client data into AI tools, it is a governance lesson.

Anything you share out of an AI tool can become a public webpage. Treat the share button like publishing.

2 min read

About 600 shared Claude conversations turned up in Google and Bing this week, fully searchable by anyone. Some of them contained things nobody should be able to find. It is a lesson every business using AI needs to take on board.

The exposure surfaced from a Reddit post on 25 July. By 26 July people had pulled up shared Claude chats and artifacts containing resumes with real names and phone numbers, API keys, crypto wallet details and a lawyer's notes on a potential ethics case. The cause was mundane and brutal. Anthropic's share feature shipped without a noindex tag, so every shared link that landed on a forum, a tweet or a public workspace became a webpage search engines could crawl.

Anthropic has since added noindex and Google began pulling the results by 27 July. Bing was still surfacing some. The permanent problem is that cached copies, screenshots and scraped collections made during the window are now beyond anyone's control.

Why it matters

Your team is pasting client data, campaign plans, pricing and customer lists into AI tools every day. Most of them assume it stays private. This is a concrete reminder that a share link is a publish action, and one missing tag can put sensitive material in front of the whole internet. For a marketing team that runs on client confidentiality, that is not a technical footnote. It is a governance problem.

600

Shared Claude conversations found indexed by Google and Bing during the exposure (Wired, July 2026)

What to do about it

Set a rule. No client data, credentials or personal information pasted into any AI tool unless it is approved and the data handling is understood.
Treat every share link as public. If you would not publish it, do not generate a share link for it.
Audit what your team has already shared. Search for your brand and client names and get anything sensitive taken down.
Prefer enterprise AI plans with clear data controls over consumer accounts for anything client-facing.
Write it down. A one-page AI use policy beats hoping everyone guesses the same boundary.

AI tools are worth using. Just remember that convenience and confidentiality pull in opposite directions, and the share button sits right on the fault line.

Share this brief
Send it to a colleague who'll find it useful.
Filip Ivanković
The Debrief / From Filip Ivanković
One every morning. Six months in, you'll see the patterns most don't.
Strategy, benchmarks, and what's actually moving in Australian marketing. Four-minute read. The reps compound.
Filip Ivanković·Founder, New RebellionAboutLinkedIn