{"schema_version":"0.10.0","id":"LR-2026-0323","record_version":1,"title":"ChatGPT private chats indexed and exposed on Google Search","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":45.6,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":2.24,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"46e13d044390e19d731a4548660368ef9bf4a6996c155eb0c99dd0c8a622233b"},"system":{"model_name":null,"model_version":null,"developer":"OpenAI","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2025-11-13","incident_class":"privacy_leakage","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"ChatGPT's browsing mode, which lets the chatbot look things up online, was the system involved. Some user conversations were routed through a 'hints=search' tag that caused parts of prompts to be added to URLs. Google indexed those URLs, so private conversation fragments appeared in Google Search results and were visible to unrelated website owners. Developers noticed the problem in Google Search Console dashboards, and analytics researcher Jason Packer and consultant Slobodan Manić investigated. OpenAI confirmed the issue, said it affected only a limited number of searches, and stated the glitch has been fixed. The sources do not say how long it existed or how many users were affected.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","harm_class":["privacy"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.hindustantimes.com/technology/chatgpt-private-chats-leaked-on-google-search-here-s-how-to-protect-your-privacy-101763030172465.html","publisher":"Hindustan Times","date":"2025-11-13","type":"press","title":"ChatGPT private chats leaked on Google Search: Here’s how to protect your privacy | Technology News\n(HT Tech) - Hindustan Times","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.developer":"C","event.incident_class":"C","impact.harm_class":"C","impact.severity":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"According to a report by Ars Technica, OpenAI confirmed the issue and clarified that it affected only a limited number of searches."}],"event.incident_class":[{"source_index":0,"quote":"If you recently used ChatGPT’s browsing mode to look something up online, your private conversations had been unintentionally exposed through Google Search results."}],"impact.harm_class":[{"source_index":0,"quote":"If you recently used ChatGPT’s browsing mode to look something up online, your private conversations had been unintentionally exposed through Google Search results."}],"impact.severity":[{"source_index":0,"quote":"According to a report by Ars Technica, OpenAI confirmed the issue and clarified that it affected only a limited number of searches."}],"event.summary":[{"source_index":0,"quote":"If you recently used ChatGPT’s browsing mode to look something up online, your private conversations had been unintentionally exposed through Google Search results."},{"source_index":0,"quote":"In certain cases, a small number of conversations were being routed through a “hints=search” tag, which caused parts of user prompts to be added to URLs."},{"source_index":0,"quote":"As Google automatically scans and indexes such URLs, these private fragments became visible to unrelated website owners."},{"source_index":0,"quote":"Developers first noticed the problem while reviewing their Google Search Console dashboards, TechCrunch reported."},{"source_index":0,"quote":"Analytics researcher Jason Packer and consultant Slobodan Manić investigated the matter further."},{"source_index":0,"quote":"According to a report by Ars Technica, OpenAI confirmed the issue and clarified that it affected only a limited number of searches."},{"source_index":0,"quote":"The company stated that the glitch has been fixed, but did not specify how long it existed or how many users were affected."}]},"notes_on_gaps":"Single press source (Hindustan Times) that relays TechCrunch and Ars Technica reporting; no primary OpenAI statement was provided. Not stated: date of occurrence, date of detection, date of disclosure (the article's 2025-11-13 date is page metadata, not stated in the text), duration, time to contain, number of users or records affected, model name and version, harness, tools, autonomy level, and any control that held or failed. The source does not say whether an autonomous agent was involved, so agent_involved and failure_class are left out. The source says the incident did not expose passwords or personal data, which conflicts with the reported exposure of private conversations; both statements are kept as reported and the harm class is set to privacy as a judgement. Detection method public_researcher is a judgement because the first noticing was by developers and the investigation by named researchers is the stated follow-up. Root cause integration is a judgement based on the browsing-mode tag routing. Severity moderate is a judgement: data of others was touched and the scope is bounded by the statement of a limited number of searches. The fix is mapped to J1 (known flaws patched) as a judgement, since the source does not name the control. An earlier, separate incident of shared chat links being indexed is mentioned in the source and was excluded because it is not this incident. Trigger, adversarial actor and data categories are not stated and are left out. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"Some conversations were routed through a hints=search tag, which added parts of user prompts to URLs.","quote":"In certain cases, a small number of conversations were being routed through a “hints=search” tag, which caused parts of user prompts to be added to URLs.","source_index":0,"grade":"C"},{"step":"reached","text":"Google indexed those URLs, and the private fragments became visible to unrelated website owners.","quote":"As Google automatically scans and indexes such URLs, these private fragments became visible to unrelated website owners.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.hindustantimes.com/technology/chatgpt-private-chats-leaked-on-google-search-here-s-how-to-protect-your-privacy-101763030172465.html"]},"analysis":{"sections":{"timeline":[{"text":"OpenAI confirmed the issue.","quote":"According to a report by Ars Technica, OpenAI confirmed the issue and clarified that it affected only a limited number of searches.","source_index":0,"when":null},{"text":"OpenAI stated the glitch has been fixed.","quote":"The company stated that the glitch has been fixed, but did not specify how long it existed or how many users were affected.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.hindustantimes.com/technology/chatgpt-private-chats-leaked-on-google-search-here-s-how-to-protect-your-privacy-101763030172465.html"]}}