Claude can inadvertently leak personal information, including full names, employers, and answers to security questions, during conversations. A demonstration revealed that sensitive data was sent to an attacker without any alerts or warnings.

An automated scanning pipeline identified 287 Chrome extensions that exfiltrate browsing history, collectively installed on approximately 37.4 million devices. This represents around 1% of the global Chrome user base.