Some Private Claude Chats Have Turned Up in Google and Bing Search Results
Web security experts are expressing concern that what is supposed to be a private conversation between a user and an AI chatbot may not be that private after all. Here is a look at a recent breach and what it may mean for people who lean on AI chatbots for advice and information.
Anthropic Claude Breach Exposes Weaknesses in Security
Some computer users were shocked to discover last weekend that select Anthropic Claude chats could be found by anyone using the web search function. The breach demonstrates how challenging it can be to keep private conversations with chatbots out of the public space.
The chats were exposed in various Google and Bing search results, making them easily accessible on the internet. The chats that were made public over the weekend included people asking what political party they should join, erotic role play, and more.
The Claude AI assistant allows users to share snapshots of chats with others by creating a public URL that points back to a specific chatbot conversation. The mistake happened when these URLs were indexed by some of the most commonly used search engines, allowing random people to access what was supposed to be a private conversation.
Claude's parent company Anthropic instructs search engines such as Bing and Google not to index chats that a user decides to share with others. Anthropic uses what is known as a robots.txt file to deliver these instructions that indicate what parts of a website are appropriate to access with their crawlers.
However, the technology is not perfect. According to Bing, developers are able to block search engines' web crawlers using the robots.txt technology. But Bing said that web developers should also put the "noindex" tag on their individual pages as an added layer of security.
Where Does the Breach Stand Now?
A recent report in WIRED regarding the weekend slip-up showed that some of the search results that had been flagged no longer showed up in Google. However, some of these queries still worked on Bing. Google notes in a developer guide that its search ignores the robots.txt instructions if the page comes from elsewhere on the internet and the page owner does not include the specific "noindex" HTML tag on the page or what is called an "x-robots-tag" in the response header.
WIRED reporters investigated a sample of an exposed Claude chat and discovered that they did not have the "noindex" tag that both Bing and Google lean on when deciding if a page should be indexed. It is unknown whether the inclusion of that tag would have prevented the leaks.
According to an Anthropic spokesperson, the company gives "people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google." The spokesperson went on to confirm that “These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services.”
Google spokesperson Ned Adriance told WIRED that Anthropic is responsible for indexing shared Claude chats. Adriance said that “Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines. We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives."
This is not the first time that Anthropic has been in hot water over this issue. Last September, the company told Forbes that it uses robots.txt to let crawlers know that the shared chats should not be accessible. However, there is no guarantee that search engines will not inadvertently index these web pages.
Although WIRED notes that the shared chats are no longer displayed in Google results, these pages still do not include the special "noindex" tag. This means that the private chats could potentially turn up in various search engines at some point down the road.
So how can you protect yourself? Claude users should go to Settings > Privacy > Shared chats to manage who can access these chats. You can never be too careful when it comes to protecting your private search and AI conversations.
Curious for more stories that keep you informed and entertained? From the latest headlines to everyday insights, YourLifeBuzz has more to explore. Dive into what's next.