Security Warning for Cloud Users; Shared Chats on Claude Indexed by Google

The disclosure that some shared chats from the Cloud service (Claude) have been indexed in Google search results has raised new concerns about the privacy of users of artificial intelligence tools. Reports indicate that some of these conversations contained sensitive information such as wallet addresses, access keys, resumes, work documents, and other personal data, which could be viewed by anyone who had the link to them.

According to Mihan Blockchain, although Anthropic, the developer of Claude, has not issued an official response to this issue by the time of publication, security experts warn that users, especially those active in the cryptocurrency market, should exercise greater caution when using the chat-sharing feature.

The issue began when Reddit users accessed hundreds of pages of shared Claude conversations by using the phrase site:claude.ai/share in Google. These pages included chats that users had created publicly, covering topics such as legal documents, company information, programming codes, technical discussions, and even personal conversations.

Some users also claimed to have seen information such as cryptocurrency wallet details or account login information on these pages; however, these claims have not been independently verified so far.

The important point is that these pages were not private conversations of users. In Claude, all conversations are private by default and only become public when the user uses the Share option. By doing this, a version of the conversation up to that moment is created in the form of a public page, and anyone who has the link can view its content.

Many users believe that "sharing with a link" means only those who have received the link will have access to the conversation. However, if that link is identified and indexed by search engines, the scope of access becomes much broader, and individuals can reach that page simply by searching for the name of a company, a person, or even a technical term.

Therefore, although the conversations were intentionally made public by the users themselves, their display in search results allowed a much larger audience to access this information.

Investigations show that Anthropic has not provided a list of these pages to search engines and has even attempted to restrict web crawlers from accessing them. However, if a link to a Claude conversation is published on websites, forums, or public social networks, search engines can identify its existence and display it in their results under certain conditions.

After this issue became public, the shared Claude pages were removed from Google search results. However, removal from Google does not mean the page itself is deleted, and anyone who has the direct link can still access it unless the conversation owner disables the sharing link.

It is still unclear whether the removal of these pages was done by Google or if Anthropic also played a role in this process.

For cryptocurrency market participants, this incident is of greater significance. Although no confirmed reports of recovery phrases or private keys of wallets being exposed have been published, and no thefts have been attributed to this issue, experts warn that entering information such as recovery phrases, private keys, exchange API keys, passwords, or confidential company information into AI chatbots can create significant security risks.

Unlike passwords, which can be changed if exposed, a private key or recovery phrase for a wallet is practically irreplaceable if leaked and can lead to permanent loss of assets.

This is not the first time AI chatbots have faced such issues. In 2023, hundreds of pages of public conversations from Bard, now known as Gemini, also appeared in Google search results, and Google removed them after acknowledging the problem.

Disclaimer: This content is provided for general branding and informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online events, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets or to use any services. Crypto assets are highly volatile and may result in loss. WEEX services and online events may not be available in all regions and are subject to applicable laws, regulations, and eligibility requirements. You are responsible for ensuring that your use of WEEX services complies with local laws and for carefully assessing the risks before participating in any crypto-related activities.