This problem is the very reason I stopped using Claude months ago. The gaslighting about it being noticed just now is baffling. There's tickets and articles[0] about this from at least July.

[0] https://www.ayush.digital/blog/the-memory-heist

Even worse, it used curl with my org emailadress when I was using my private claude account... really strange.

I just checked mine and the header I see is:

  Claude-User (claude-code/2.1.318 (cli); +https://support.anthropic.com/)

What situation are you seeing this in?

I use claude code... and I friking now that I'm being dumb and naive on thinking I can trust them... sounds like I'll have to start working on the jail thing for claude code to not see anything and only talk to anthropic servers... what a pain

update: this can be also server side on anthropic side... so the request leaves your machine with some random guid associated to you, and the anthropic server then proceeds to query with all your details any way.

I mitm the connection and nothing was leaving at least with the claude code web fetch tool of claude code.

I'm in version 2.1.318

Reading these comments makes me wonder if people really understand the way harnesses work.

Any information that they have access to is fair game. The only way to avoid this stuff is to sandbox them and manage their context (ie. don't let anthropic put a ton of junk on the front of all your inference calls).

Almost certainly there are services out there that are scraping more important keys in similar ways...

If you're using claude or claude code, you'll know the liberty it takes on your environment, either sandbox vm or assume you're sharing like with a brother, period.

I swear I heard this exact story some 2-3 weeks ago.

If I recall that story correctly, a dev noticed that after asking Claude to test an API it started injecting his email into the test data. Without asking.

But what was the weirdest part of that story - Claude never saw that email. Dev claimed that the email Claude was using was his business email, and it wasn't even present on his developer machine anywhere.

If you're not using email alaising yet, what are you doing? You'd still probably not want your Claude email leak even if it's an alias, but it'd still be an improvement.

And even if you don't care about privacy, it's just so much more convenient. DuckDuckGo is a good free one.

https://www.privacyguides.org/en/email-aliasing/

My high school computer instructor told me:

"It's doing exactly what you told it to do".

Still applies in the Age of the LLM

Email info itself can be exposed in so many places, so the damage probably isn't that big, and I think Claude Code may also have judged that an email isn't that sensitive and done it for that reason. Even so, it hints that information other than email could go out too, so it seems like Anthropic needs a system that can monitor this (when sending something outside).