This morning, Protos was able to access dozens of full Perplexity Computer files from assorted customers, simply by querying Google, Bing, and DuckDuckGo using the standard URL structure for shareable links.<\/p>\n
We\u2019ve reported the bug to Perplexity and the three search engines.<\/p>\n
The original leak affecting Anthropic customers stemmed from shareable links from Claude\u2019s interface, which didn\u2019t warn customers that creating a shareable link would also index its contents on search engines. <\/p>\n
Many customers didn\u2019t intend for these links to become indexed, yet because Claude didn\u2019t<\/a> hide the webpages properly with no index tags or other privacy-preserving protocols, search engines indexed customers\u2019 links and their associated files and artifacts.<\/p>\n After the story went viral<\/a>, search engines de-indexed Claude\u2019s public-sharing directory. Indeed, current searches return zero results for Claude while an equivalent query for Perplexity returns pages of listings.<\/p>\n Read more: Anthropic\u2019s public Claude Fable release has crypto on edge<\/a><\/p>\n Perplexity Computer outputs appear in search engine results<\/p>\n Files accessible by unwitting Perplexity customers included specific titles about a variety of topics. The results are not merely search engine caches but live on the Perplexity.ai domain.<\/p>\n For disambiguation, Perplexity has a separate domain for customers who want to voluntarily publish content to the internet, pplx.app, which is unrelated to the above leak.<\/p>\n Although plenty of Perplexity Computer files are indexed, Google cautions<\/a> that its site operator doesn\u2019t necessarily return every indexed page.<\/p>\n Unfortunately, that means that more specific queries with various keywords might return additional content.<\/p>\n Perplexity, like Claude, turned obscure public URLs into a discovery route for strangers searching for personal details. Importantly, Perplexity\u2019s Share interface only discloses that creating links means \u201cAnyone with the link can view,\u201d not \u201cAnyone on the internet can view.\u201d<\/p>\n Not AI companies\u2019 first privacy failure<\/p>\n A Reddit post revealed<\/a> the Claude search issue on July 25, alleging that some indexed conversations contained credentials, resumes, internal company information, and personal discussions.<\/p>\n Protos didn\u2019t inspect those conversations and cannot independently verify their contents.<\/p>\n Sadly, Anthropic has seen this problem before. Forbes reported<\/a> in September 2025 that hundreds of shared Claude conversations appeared in Google before the results de-indexed.<\/p>\n OpenAI encountered a related problem in July 2025. Its security chief said<\/a> the company removed an opt-in feature that made shared ChatGPT conversations discoverable through search engines.<\/p>\n Got a tip? Send us an email securely via\u00a0Protos Leaks<\/a>. For more informed news and investigations, follow us on\u00a0X<\/a>,\u00a0Bluesky<\/a>, and\u00a0Google News<\/a>, or subscribe to our\u00a0YouTube<\/a>\u00a0channel.<\/p>\n \t\t\t![\"\"](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-27-at-12.50.47-PM-2.png\")
<\/a>Screenshot of the Share interface for Perplexity Computer customers.<\/p>\n