BrevFeed
Sign in
← All stories
● Covered by 1 source · 1 reportMedium impact1 negative

Claude Code Reportedly Exposes User Email Addresses in User-Agent Headers During Web Searches

🔄 Updated 1d ago
Aggregated by BrevFeed security · updated 1d ago
🔖 Save
New to BrevFeed? We gather this story from every outlet covering it into one summary — ranked by real-world impact, not just the latest headline — so you never miss what matters. What is BrevFeed? →

Key points

  • Claude Code sends user email in User-Agent header.
  • Occurs during web searches without user permission.
  • Reported to cause an increase in scam emails.
  • User is migrating services due to privacy concerns.

Privacy Violation Reported in Claude Code

A user has filed a bug report alleging that Claude Code, version 2.1.318, is transmitting their email address in the User-Agent header during web search activities. This occurs without the user's consent, exposing personal information to arbitrary third parties.

Impact on User Privacy

The user claims that this data exposure has directly resulted in receiving a significant increase in scam emails. They argue that this behavior is detrimental, as it neither benefits services by identifying agentic traffic nor preserves user anonymity, instead creating a data source for malicious actors.

Call for Removal of Feature

The reporter states that this functionality should not be an opt-out or opt-in setting but should be entirely removed from the software. Citing a lack of trust in Anthropic's commitment to privacy, the user is migrating their company's operations to an alternative service, Pi with OpenRouter.

✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →

Keep reading

ai Anthropic Launches Reflect Dashboard for Claude and Secure 1Password Integration 1d ago dev New Terminal Tools Manage AI Coding Agents and Sessions 12h ago ai Anthropic Expands Claude Science and Cowork Platforms for Enhanced Science and Utility 1d ago security ClickFix Social Engineering Attack Raises Cybersecurity Concerns 7m ago security Jscrambler npm Package Supply Chain Attack Deploys Infostealer 9d ago

The daily brief

One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.

One email a day. Unsubscribe in one click, any time.

Today's brief

Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.

~4 min · 3 stories · Nov 07

▶ Play today's brief Listen on Spotify

New every morning, and the back catalogue is archived by date.

Primary sources

GitHub cmc_internal/api GitHub github/collect GitHub _view_fragments/issues GitHub anthropics/claude-code GitHub _private/browser GitHub get-started/accessibility

Reporting from

Hacker News Front Page — Claude Code sends your email address to websites 💬 Discuss on HN 2d ago →

A user reported that Claude Code is divulging their email address to third-party websites via the User-Agent request header during web searches without explicit permission. This privacy violation has led to an increase in scam emails for the user, prompting them to migrate their company's services.