Back Office BeatSubscribe

Published by J9 Systems. What's new in business tech, and what it means for yours.

From the brief of Wednesday, October 21, 2026 · No. 10

From the daily brief · AI

Meta pauses Muse chat sharing after Claroc finds 6,800 links in public DNS

Few small firms use Meta's Muse, but any AI chat your staff have 'shared' may be a public page, and checking takes about an hour.

By Carter Josephson · · 2 min read

What happened

Security firm Claroc reported this week that it found more than 6,800 share links for Meta's Muse AI assistant in public DNS records, because Muse built each link's web address from the conversation's title plus a random ID, and exposed pages included a marketing company's revenue review, a small business owner's loan application and a workplace's full-year staff calendar. Meta said on Oct. 20 that it has paused Muse's sharing feature while it reviews the report and considers changes to how the links can be discovered.

What it means for a 10-to-50-person business

The direct effect is small. Few 10-to-50-person businesses run work through Muse. The useful lesson applies to every AI chat tool your staff use: a 'share' link is a web page anyone with the address can open, with no password. Claroc found Muse put a description of each chat in that address, and the address leaked into public records. ChatGPT, Claude and Grok chats have also ended up on Google Search in the past. Worked example: a 16-person accounting firm where 5 staff use personal AI chat accounts for work. If one pasted a client's loan details into a chat and shared the link with a colleague, a stranger could read it. Asking the team takes about 30 minutes. Reviewing and deleting shared links takes about 15 minutes per user, so roughly 1.25 hours for 5 people. Who should care: firms that handle client financial, legal, medical or HR data. Who can ignore it: shops where nobody uses AI chat tools for work, or where sharing is already restricted on a company account.

What to do
Try it

This month, ask every employee whether they have shared an AI chat link for work, have them delete those links in each tool's settings, and add a one-line rule that client data never goes into a shared AI link.

What it costs
What it costs
Staff survey and one-line policy, 30 min owner time at $75/hr
≈ $38
Review and delete shared links, 5 users × 15 min at $40/hr
≈ $50
New software
$0
Doing nothing
$0 now; any client data already in a shared link stays readable until someone deletes it
Sources
blog.claroc.io (primary) · The Verge: Meta pauses Muse sharing after researchers find AI chats on the web · Ars Technica: Meta Muse exposes users' personal and business secrets when they share conversations · Fast Company: Google indexing ChatGPT conversations

Questions owners ask

We don't use Meta Muse. Does this matter?

Only a little. Muse itself has paused sharing. The same kind of share link exists in other AI chat tools, so the 1-hour check applies to whatever your staff actually use.

Is a shared AI chat link private if I only send it to one person?

No. It works like an unlisted page: anyone who has or can find the address can open it without logging in. In this case Claroc found the addresses in public DNS records.

Do we need to buy anything?

No. Deleting shared links and writing a short rule costs staff time, not software.

Three to five of these, every weekday morning.

Related