Loading story…
An investigation found that 264,078 shared conversations across six AI chatbot platforms — ChatGPT, Claude, Gemini, Grok, Copilot, and DeepSeek — were publicly accessible and indexed by Archive.org after users generated web pages through built-in “Share” features. The report said 96,477 of the exposed conversations were from 2026 alone and that the issue was not caused by a platform breach, but by publicly reachable links created for sharing. Reportedly exposed material included names, phone numbers, home addresses, national ID numbers, immigration and residency records, administrative documents, retirement letters, and intimate personal exchanges.
The disclosures renewed scrutiny of privacy controls on major AI services, particularly after shared Claude conversations were reportedly discoverable through Google indexing, leading Anthropic to disable that indexing path. Guidance published afterward urged users of ChatGPT, Gemini, Copilot, and Claude to reduce exposure by revoking public share links, using temporary or incognito chats, deleting chat histories, disabling model-training use where available, and turning off memory or personalization settings that can retain additional context or connected-service data.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Henk van Ess published an investigative article on Digital Digging reporting that 264,078 shared conversations across ChatGPT, Claude, Gemini, Grok, Copilot, and DeepSeek were publicly exposed and discoverable via Archive.org indexing. The report said the exposure stemmed from public share-page design rather than a hack, and included 96,477 exposed conversations from 2026.
After shared Claude conversations were reportedly discoverable through a Google dork search query, Anthropic quickly fixed the issue by disabling that indexing path. The article says users had previously shared Claude conversations through active links before they became discoverable.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
schneier.com
Open sourcezdnet.com
Open sourcecyberveille.ch
Open sourcesupport.claude.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic’s Claude shared-chat pages were reportedly indexed by Google and Bing, making publicly shared conversations discoverable through searches such as `site:claude.ai/share`. The exposed material reportedly included legal discussions, engineering and software development work, resumes, business conversations, personal exchanges, and in some accounts credentials and cryptocurrency-related data. Reports said the pages were publicly accessible snapshots intended for anyone with the link, and that missing or ineffective `noindex` controls likely allowed search engines to crawl and list them once the URLs appeared on public websites. The incident was described as a privacy exposure rather than a direct compromise of Anthropic’s systems, but it raised concerns over data leakage, intellectual property exposure, and compliance risk. By Sunday, many of the affected search results had reportedly disappeared, suggesting deindexing or a backend change, though previously saved share URLs could still remain reachable unless revoked server-side. Anthropic had not issued a public statement at the time of reporting, and users were urged to review shared chats, remove sensitive links, and assume any AI conversation shared publicly could become searchable on the open web.
Jul 31, 2026
Researchers reported that several AI-themed browser extensions in official marketplaces covertly harvested user conversations from generative AI services including **ChatGPT, Claude, Copilot, Gemini, and DeepSeek**. G Data identified **Urban VPN**, **Smart Sidebar: ChatGPT, Claude and DeepSeek**, and **AI Assistant/Chat AI** as examples that remained outwardly functional while injecting scripts, intercepting requests, tampering with page content, or using hidden iframes to capture prompts and responses from visited AI sites. Investigators said the stolen data included conversation IDs, hostnames, timestamps, and full chat histories, with some payloads encoded in Base64 and sent to external servers. The extensions reportedly had strong ratings, large user bases, and in one case a Chrome Web Store **Featured** badge, underscoring how official store vetting can miss dynamic malicious behavior such as remote iframe communications; researchers warned that AI-focused extensions now expose a broad attack surface and urged enterprises to enforce strict extension allow-listing, minimize permissions, and remove unnecessary add-ons from systems accessing sensitive AI platforms.
Jun 29, 2026
A misconfiguration in *Firebase* exposed nearly **300 million** private messages from roughly **25 million** users of the AI chatbot app **Chat & Ask AI**, after the app’s Firebase `Security Rules` were left publicly accessible. Reporting indicates the exposed data included full chat histories, bot names, and highly sensitive user prompts (including self-harm and potentially unlawful activity discussions); the issue was reported to developer **Codeway** by a researcher who also claimed to have identified similar inadvertent exposure across **103** other iOS apps, underscoring how common cloud-database misconfigurations remain as AI features are embedded into consumer applications. Separately, the **European Parliament** restricted lawmakers’ use of built-in AI tools on work devices, citing cybersecurity and privacy concerns about uploading confidential correspondence to external cloud services and uncertainty over how uploaded data may be stored, reused for model improvement, or accessed under non-EU legal authorities. In healthcare, ECRI Institute researchers warned that **AI chatbots** represent a leading 2026 health technology hazard due to safety, security, and privacy risks—particularly because many tools are not validated for clinical use—while also highlighting that IT outages (including those caused by cyberattacks) and legacy medical device issues remain major operational and patient-safety threats.
Jun 29, 2026