{"schema_version":"0.10.0","id":"LR-2026-0322","record_version":1,"title":"ChatGPT conversation logs exposed in Google Search Console","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":43.0,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":3.2,"unhedged_language":4.58},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Ars Technica · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: Ars Technica · subject to change"}]},"sources_hash":"eae3ed7b74d5a71252ee74944b075f4a57576a57ba47fa7e3e8a7e985edcbecd"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2025-11-07","incident_class":"privacy_leakage","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"public_researcher","summary":"ChatGPT is OpenAI's chatbot, and in this incident user conversations appeared in Google Search Console, a tool site managers use to monitor search traffic. Some leaked entries exceeded 300 characters and read like private chats about relationship or business problems. Analytics consultant Jason Packer flagged the issue in a blog post, and he and Slobodan Manić ran tests they said suggested OpenAI scrapes Google Search with user prompts. OpenAI declined to confirm that theory but said it was aware of the issue and had resolved a glitch that temporarily affected how a small number of search queries were routed. Packer welcomed the quick fix but said OpenAI's response did not confirm whether it was scraping Google, leaving doubt that the issue was fully resolved.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK04","secondary_risks":["RK15"]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate test: data of others touched with a bounded scope stated (OpenAI says a small number of search queries were affected).","harm_class":["privacy"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://arstechnica.com/tech-policy/2025/11/oddest-chatgpt-leaks-yet-cringey-chat-logs-found-in-google-analytics-tool/","publisher":"Ars Technica","date":"2025-11-07","type":"press","title":"Oddest ChatGPT leaks yet: Cringey chat logs found in Google analytics tool - Ars Technica","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"event.detection_method":"C","event.incident_class":"C","impact.harm_class":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.secondary_risks":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.detection_method":[{"source_index":0,"quote":"Jason Packer, owner of an analytics consulting firm called Quantable, was among the first to flag the issue in a detailed blog last month."}],"event.incident_class":[{"source_index":0,"quote":"For months, extremely personal and sensitive ChatGPT conversations have been leaking into an unexpected destination: Google Search Console (GSC), a tool that developers typically use to monitor search traffic, not lurk private chats."}],"impact.harm_class":[{"source_index":0,"quote":"For months, extremely personal and sensitive ChatGPT conversations have been leaking into an unexpected destination: Google Search Console (GSC), a tool that developers typically use to monitor search traffic, not lurk private chats."}],"impact.severity":[{"source_index":0,"quote":"However, an OpenAI spokesperson confirmed that the company was “aware” of the issue and has since “resolved” a glitch “that temporarily affected how a small number of search queries were routed.”"}],"impact.severity_because":[{"source_index":0,"quote":"However, an OpenAI spokesperson confirmed that the company was “aware” of the issue and has since “resolved” a glitch “that temporarily affected how a small number of search queries were routed.”"}],"event.summary":[{"source_index":0,"quote":"For months, extremely personal and sensitive ChatGPT conversations have been leaking into an unexpected destination: Google Search Console (GSC), a tool that developers typically use to monitor search traffic, not lurk private chats."},{"source_index":0,"quote":"But starting this September, odd queries, sometimes more than 300 characters long, could also be found in GSC."},{"source_index":0,"quote":"Jason Packer, owner of an analytics consulting firm called Quantable, was among the first to flag the issue in a detailed blog last month."},{"source_index":0,"quote":"Together, they conducted testing that they believe may have surfaced “the first definitive proof that OpenAI directly scrapes Google Search with actual user prompts.”"},{"source_index":0,"quote":"However, an OpenAI spokesperson confirmed that the company was “aware” of the issue and has since “resolved” a glitch “that temporarily affected how a small number of search queries were routed.”"},{"source_index":0,"quote":"Packer told Ars that he’s “very pleased that OpenAI was able to resolve the issue quickly.”"},{"source_index":0,"quote":"But he suggested that OpenAI’s response failed to confirm whether or not OpenAI was scraping Google, and that leaves room for doubt that the issue was completely resolved."}]},"notes_on_gaps":"Only one source (Ars Technica, press). No year is stated for 'this September', so date_occurred is omitted. The article date 2025-11-07 is the publication date, not a stated disclosure date, so date_disclosed and date_detected are omitted. No root cause is stated: OpenAI's 'glitch that temporarily affected how a small number of search queries were routed' is its own unverified account, so root_cause and responsible_party are omitted. No trigger, duration, time to contain, or agent involvement is stated, so agent-related fields are omitted. No control is stated as held, failed or missing, so links are empty. The OpenAI fix is not tied to any listed control, so remediations are empty. Severity moderate is my judgement from the bounded scope OpenAI stated; no affected count is given. Scraping of Google by OpenAI was a theory from Packer and Manić and was not confirmed. Country and industry are not stated. Record counts and loss amounts are not stated. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: Ars Technica · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null}}