Severity
Exposure
Date of incident
Conversations Indexed in Google
reported
Tier -
B
Shared agent session URLs leaked proprietary prompts — no export metadata control.
What Happened
Users generated share links for Bard conversations containing proprietary prompts; Google's crawler indexed bard.google.com/share URLs, exposing content beyond intended recipients.
Sumarry
Google Search indexed shared Bard chat links; users who shared conversations found them discoverable in public search results.
Detect
DLP on shared agent session exports
What Happened
Disable share links in enterprise agents
Blekline //
Metadata audit on session export events
Without agent boundary //
Admin disable sharing — no detect on link creation
