Multiple LLM Platforms Expose Thousands of Conversations via Share Links
ChatGPT, Claude, Copilot, Grok
Share features across several major AI platforms inadvertently exposed user conversations to search engines and archiving services. The indexed data leaked personal identifiers, API keys, and business details.
- first report
- 31 Jul 2025
- last update
- 31 Jul 2025
Timeline · 1
Sources · 1
Research and catalogues
- 2025-07-31Reported Public Exposure of Over 100,000 LLM Conversations via Share Links Indexed by Search Engines and ArchivedAI Incident Database · incidentdatabase.ai/cite/1186
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Data leak
- severity
- 3 · Confirmed exploitation
- targets
- OpenAI, Anthropic, Microsoft, Mistral, xAI
- owasp llm top 10
- LLM02:2025 Sensitive Information Disclosure
- mitre atlas
- no technique for these categories
- dates
- happened 31 Jul 2025 · first reported 31 Jul 2025
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Multiple LLM Platforms Expose Thousands of Conversations via Share Links https://gcdradar.vercel.app/incidents/multiple-llm-platforms-expose-thousands-of-conversations-via · AIR-2025-0089 · closed 2025-08-14 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation) - Fix status: No fix needed - First reported: 2025-07-31 - AI role: Attack on AI - Products: ChatGPT, Claude, Copilot, Grok ## Summary Share features across several major AI platforms inadvertently exposed user conversations to search engines and archiving services. The indexed data leaked personal identifiers, API keys, and business details. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-07-31: Reported Public Exposure of Over 100,000 LLM Conversations via Share Links Indexed by Search Engines and Archived (https://incidentdatabase.ai/cite/1186) ## Sources - 2025-07-31 AI Incident Database: Reported Public Exposure of Over 100,000 LLM Conversations via Share Links Indexed by Search Engines and Archived https://incidentdatabase.ai/cite/1186 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedChatGPT CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT
Breaches & attacks · Exploited · since 15 Jul 2025
AI - closedAWS Bedrock Threat Actors Hijack Cloud-Hosted LLMs via Stolen Credentials
Patch now · Exploited · since 6 May 2024
AI - liveClaude Code + SDKs Stolen Claude API keys turn Claude Code into a remote implant
Research · since 12 Nov 2026
AI - liveChatGPT Researchers bypass OpenAI ChatGPT Lockdown Mode protections
Patch now · Disclosed · Patched · since 5 Nov 2026
AI - liveChatGPT ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access
Patch now · Disclosed · Patched · since 18 Oct 2026
AI - closedChatGPT Fake Claude and ChatGPT campaigns use ClickFix tactics against developers
Breaches & attacks · Exploited · since 16 Oct 2026
AI