Meta halts Muse sharing after 6,800 AI chat links found online

Meta has paused a Muse feature that allowed users to share conversations with its AI assistant after security researchers found more than 6,800 Muse chat links publicly accessible on the web, according to The Verge. The security firm Claroc discovered that these links, built from conversation titles and random IDs, were easily found through public DNS records. Some chats exposed included a marketing company’s revenue, a workplace calendar, a loan application, and notes from a job candidate’s call with an AI lab.

A Muse spokesperson said the company has paused the sharing function while it reviews the report and considers changes to link discovery. The feature was designed to let users share conversations via a link, but the structure of the URLs made them easy to reconstruct and access. This incident follows similar exposures involving other AI chat platforms, where shared conversations have become publicly available through search engines.

For regulated industries, the exposure of confidential business data through AI chat sharing highlights the need for strict controls over how AI-generated content is shared and stored. Organisations should review their own AI tools and sharing settings to prevent unauthorised disclosure of sensitive information. Regulators may increase scrutiny of AI data privacy practices following such incidents.