{"schema_version":"0.10.0","id":"LR-2026-0845","record_version":1,"title":"Claude Code sent user email addresses in User-Agent headers during web searches","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":50.3,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":6.72,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-06","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Only a republished copy: LavX News · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":1,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-06","history":[{"date":"2026-11-06","from_level":null,"to_level":"preliminary","reason":"Only a republished copy: LavX News · subject to change"}]},"sources_hash":"ea54fac01a69931c8f8e771817c75038913ffd874b33a921c03a40594a6652d3"},"system":{"model_name":null,"model_version":null,"developer":"Anthropic","harness":"Claude Code","tools_granted":["web_search"],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-11-06","incident_class":"privacy_leakage","failure_class":"data_exfiltration","agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"victim","summary":"Claude Code, Anthropic's coding tool, sent user email addresses in the User-Agent header during web searches, transmitting them to third-party websites. A GitHub issue filed by developer Taylor Edwards surfaced the problem after they reported dozens of scam emails daily. An Anthropic contributor said the behaviour was not an intentional feature. A fix in version 2.1.317 added a built-in module, cc-plugin-privacy, that blocks the email leakage by default and can be disabled through the /plugins command.","tags":["privacy","coding-agent","data-exfiltration","web-search","user-agent-header","scam-emails"],"date_detected":null,"near_miss":false,"root_cause":"integration","root_cause_detail":"Grade D: the source states that email addresses were included in outbound User-Agent headers. Reading this as a wiring defect in the harness is an inference; the source does not name the component at fault.","failure_class_detail":"Grade D: classified from the stated transmission of user email addresses to third-party websites. The source describes the transmission as inadvertent and does not say the agent chose to send the data.","responsible_party":"provider","adversarial_actor":"the_system_itself","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"The company deployed a fix in version 2.1.317 through a built-in module called cc-plugin-privacy, which blocks the email leakage by default.","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate: user email addresses (data of others) were transmitted to third-party websites. The source does not state a bounded scope, so this tier is partly grade D.","harm_class":["privacy"],"affected_description":"users of Claude Code","protected_class_involved":null,"data_categories_exposed":["pii"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://news.lavx.hu/article/claude-code-leaked-user-emails-in-web-search-headers-anthropic-deploys-privacy-fix","publisher":"news.lavx.hu","date":"2026-11-06","type":"press","title":"Claude Code Leaked User Emails in Web Search Headers, Anthropic Deploys Privacy Fix","archived_url":null,"attachment":"first_report","independence":"derivative"}],"per_field_confidence":{"system.developer":"C","system.harness":"C","system.tools_granted":"C","system.autonomy_level":"D","system.deployment_context":"D","event.date_disclosed":"D","event.failure_class":"C","event.trigger":"D","event.detection_method":"C","event.summary":"C","event.tags":"C","event.near_miss":"C","event.root_cause":"C","event.root_cause_detail":"C","event.responsible_party":"C","event.adversarial_actor":"C","event.remediation":"C","event.incident_class":"C","event.agent_involved":"C","event.failure_class_detail":"C","impact.severity":"C","impact.harm_class":"C","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity_because":"C","context.country":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"Anthropic acknowledged that Claude Code was inadvertently sending user email addresses in User-Agent headers during web searches, exposing users to spam and scams."}],"system.harness":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"system.tools_granted":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"event.failure_class":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"event.detection_method":[{"source_index":0,"quote":"The issue surfaced in a GitHub issue filed by developer Taylor Edwards, who reported receiving dozens of scam emails daily after Claude Code included their email address in outbound requests."}],"event.summary":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."},{"source_index":0,"quote":"The issue surfaced in a GitHub issue filed by developer Taylor Edwards, who reported receiving dozens of scam emails daily after Claude Code included their email address in outbound requests."},{"source_index":0,"quote":"Anthropic contributor poteat responded that the behavior was not an intentional feature."},{"source_index":0,"quote":"The company deployed a fix in version 2.1.317 through a built-in module called cc-plugin-privacy, which blocks the email leakage by default."},{"source_index":0,"quote":"Users can disable the module via the /plugins command."}],"event.tags":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."},{"source_index":0,"quote":"The issue surfaced in a GitHub issue filed by developer Taylor Edwards, who reported receiving dozens of scam emails daily after Claude Code included their email address in outbound requests."},{"source_index":0,"quote":"As AI coding assistants gain the ability to browse the web and interact with external services, the attack surface for privacy violations expands beyond prompt injection into the tools themselves."}],"event.near_miss":[{"source_index":0,"quote":"The issue surfaced in a GitHub issue filed by developer Taylor Edwards, who reported receiving dozens of scam emails daily after Claude Code included their email address in outbound requests."}],"event.root_cause":[{"source_index":0,"quote":"Anthropic acknowledged that Claude Code was inadvertently sending user email addresses in User-Agent headers during web searches, exposing users to spam and scams."}],"event.root_cause_detail":[{"source_index":0,"quote":"Anthropic acknowledged that Claude Code was inadvertently sending user email addresses in User-Agent headers during web searches, exposing users to spam and scams."}],"event.responsible_party":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"event.adversarial_actor":[{"source_index":0,"quote":"Anthropic contributor poteat responded that the behavior was not an intentional feature."}],"event.remediation":[{"source_index":0,"quote":"The company deployed a fix in version 2.1.317 through a built-in module called cc-plugin-privacy, which blocks the email leakage by default."}],"event.incident_class":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"event.agent_involved":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"event.failure_class_detail":[{"source_index":0,"quote":"Anthropic acknowledged that Claude Code was inadvertently sending user email addresses in User-Agent headers during web searches, exposing users to spam and scams."},{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"impact.severity":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"impact.harm_class":[{"source_index":0,"quote":"Anthropic acknowledged that Claude Code was inadvertently sending user email addresses in User-Agent headers during web searches, exposing users to spam and scams."}],"impact.affected_description":[{"source_index":0,"quote":"Anthropic acknowledged that Claude Code was inadvertently sending user email addresses in User-Agent headers during web searches, exposing users to spam and scams."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}],"impact.severity_because":[{"source_index":0,"quote":"Anthropic confirmed this week that its Claude Code tool was transmitting user email addresses to third-party websites through the User-Agent header during web searches, a privacy lapse that one developer said flooded their inbox with scam emails."}]},"notes_on_gaps":"Single incident, reported by a secondary news site that cites a GitHub issue; the GitHub issue itself is not reproduced in the document. Not stated: the date the behaviour began or ended (event.date_occurred), the date of first public disclosure (only 'this week' appears in the text, so date_disclosed is null and the collector's publication date was not used), the model name and version, the autonomy arrangement, the deployment context, the number of affected users or records, the number of third-party sites that received data, the time to detection or containment, and any loss figure. Judgement calls: (1) failure_class data_exfiltration is grade D, since the source describes an inadvertent header transmission rather than an agent decision; (2) root_cause integration and adversarial_actor the_system_itself are inferred from 'inadvertently' and the contributor's statement that the behaviour was not intentional; (3) detection_method victim reflects that the reporting developer noticed scam emails; (4) severity moderate lacks the bounded-scope element its test requires, so the tier is partly grade D; (5) tools_granted lists web_search from 'during web searches'. The source does not state whether the leak was systemic across all Claude Code users, so systemic_exposure is null. The developer's statement about migrating providers is not an incident fact and was not extracted. Extractor proposed values without quotes; dropped: ['context.country', 'context.denominator_available', 'event.trigger', 'impact.reversibility', 'system.autonomy_level', 'system.deployment_context']. Single secondary source; corroborate before upgrading any field to B. [2026-11-06: evidence level set: Preliminary (Only a republished copy: LavX News · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null}}