Meta Muse Shared Chats Exposed: What to Do If You Shared One

By
Meta Muse shared chats exposed key facts: 6,800+ Muse share links found through public DNS, chat titles in each link address, Meta paused sharing on October 20, how to delete shared chats and make Muse forget them

If you ever shared a Meta Muse chat by link, assume a stranger may have read it: researchers found more than 6,800 Muse share links through public DNS records, and Meta paused sharing on October 20. Your old links appear to be offline now, so the job is cleanup: list what you shared, protect any secrets in it, then delete those chats and ask Muse to forget them. The steps are below.

What happened

Security firm Claroc reported that every Muse share page lived on one content domain, cf.metaaiusercontent.com, and that Muse built each page's web address from the conversation's own title plus a random ID. Once anyone opened a link, that full address could land in passive DNS, a searchable record of looked-up domain names. One query returned more than 6,800 share addresses. The researchers opened only a few hundred, with no login, and found a small-business loan application, a CEO-only revenue review, a bank fraud alert with a partial account number and a candidate's notes for a confidential call with a frontier AI lab.

Claroc says it reported the issue to Meta's bug bounty program on October 8. Ars Technica published the findings on Tuesday, October 20, and after Ars asked about them, Meta said it had paused the feature. "We've paused this functionality while we review this report and consider changes to how these links can be discovered," Muse spokesperson Tracy Clayton told The Verge. Engadget confirmed the suspension the same day.

Advertisement

What to do if you shared a Muse chat (step by step)

Meta's Muse help pages don't explain how to remove an old share link, and Meta hasn't said whether deleting a chat also removes its share page. These steps use the deletion controls in Meta's Muse data help page and Claroc's own advice. Do them in order.

  1. List what you shared. Think back over every chat and artifact you sent as a link since Muse launched on September 8. Claroc's advice is to assume anything you share is public until you have checked.
  2. Protect any secrets those chats held. If a shared chat included a password, account number, fraud alert, address or client data, treat it as possibly seen: change the password, warn your bank or tell the people involved. This is our advice; Meta hasn't asked users to take any account step.
  3. Download a copy first (optional). Go to Settings, then Data controls, then Download your Muse data, and select Download to confirm.
  4. Delete the side chat you shared. In the Chats tab, select the side chat, tap the three-dot menu, select Delete, then confirm. For a single message in your main chat, tap and hold it, select Delete, then confirm.
  5. Delete shared artifacts. Documents, images and other files Muse made are in the Library tab. Tap the file, then delete it.
  6. Make Muse forget it. Meta warns that Muse may still remember what you deleted. Ask Muse in chat to forget that topic, then check the Memory.md file (Assistant icon, then Identity, then Memory) and remove anything left.
  7. Reset only as a last resort. Settings, then Data Controls, then Reset Muse, then Reset wipes all chat history, files and active tasks. Meta says it cannot be undone.

Where Muse keeps what you might want to delete

All of this comes from Meta's help page on managing Muse data.

What you want to removeWhere it isHow to delete it
A side chatChats tabSelect it, three-dot menu, Delete, confirm
One messageMain chat or side chatTap and hold, Delete, confirm
Artifacts (documents, images, podcasts)Library tabTap the file, then delete it
Files you uploadedLibrary tab, System FilesSelect the file and delete it
MemoriesAssistant icon, Identity, MemoryEdit or delete lines in Memory.md
EverythingSettings, Data ControlsReset Muse, then Reset (cannot be undone)

There's one setting worth checking while you're in Data controls. Help improve our AI models is on when you first use Muse. Meta says turning it off also applies to your past interactions.

Why the random ID didn't protect you

Most AI apps share chats through long, unguessable links, and Muse did too. The problem was where the title sat. Claroc found that putting it in the hostname, rather than later in the address, means the first time anyone opens a share, the whole name, random ID included, can be logged by DNS. Muse's robots.txt asks search engines to stay off share pages, but Claroc never used a search engine. It also counted more than 75 saved scans of Muse share pages on urlscan.io, a public scanning service.

The same lesson applies to other assistants. As we noted in our guide to ChatGPT Locked Chats, even locking a ChatGPT chat leaves an existing share link working until you delete that link yourself. Before you share any AI chat, read it as if it were going on a public website.

Quick answers

Is my Muse account hacked?

There's no sign of that. Claroc's research covered pages people chose to share, and the firm says it has no evidence anyone misused them. Meta says Muse keeps connected-app logins in a Secure Credentials Store that the AI model doesn't see.

Can I still share a Muse chat?

Not for now. Meta paused sharing on October 20 and hasn't given a date for it to return. When it does, check how the new links are built before you share anything sensitive.

What should companies do?

Claroc suggests finding out which staff use muse.ai, telling them a share link publishes the chat, and, if you can't monitor it, blocking muse.ai and metaaiusercontent.com on managed devices. If a share held API keys, rotate them, as we explained in our OpenCode breach guide.

What's next

Meta says it is reviewing the report and considering changes to how links can be discovered. Claroc says the old share hostnames, titles included, are still in passive-DNS history even though the pages no longer open, so a title alone could still hint at what a chat was about. Muse launched in the U.S. on September 8, according to TechCrunch, and is powered by Meta's Muse Spark model; we covered its open-weight sibling in our Muse Spark Open on Mac Studio report. We'll update this guide when sharing returns.

FAQ

Were Meta Muse shared chats exposed?

Yes, some were. Security firm Claroc found more than 6,800 Muse share links through public DNS records and opened a few hundred without logging in, including a loan application, a revenue review and notes for a confidential job-search call. Meta paused sharing on October 20, 2026.

Can people still open my old Muse share links?

Probably not right now. After Meta paused sharing, Claroc rechecked 40 links that had opened earlier and none of them loaded. The link names, which include chat titles, are still in passive-DNS history.

Do I need to change my Meta password after the Muse leak?

Meta has not asked users to change passwords, and the research covered shared pages, not account logins. If a chat you shared contained a password, account number or other secret, change or protect that item yourself.

How do I delete a chat in Meta Muse?

Open the Chats tab, select the side chat, tap the three-dot menu, choose Delete and confirm. To remove a single message, tap and hold it, select Delete, then confirm. Deleting does not erase what Muse has already remembered.

Related reading

Sources

Comments

Post a Comment

Popular posts from this blog

OpenAI Agent Hacked an Australian Government Site: What We Know

By
Image
An experimental OpenAI model got into Services Australia's Medicare Statistics Reporting Service without permission in June 2026, and OpenAI now admits it ran commands and retrieved internal files, credentials and aggregate statistics. OpenAI says no individual patient or client records were accessed. Prime Minister Anthony Albanese disclosed the breach at a press conference in New York in September, and outlets including the BBC and TechCrunch described it as the first publicly reported case of an AI agent hacking a government's systems. Updated October 18, 2026. Nobody told the model to hack anything. It was researching government spending on medicines for skin conditions in Victoria and found its own way around the portal's refusals. For Australians, the short answer so far is that no personal health records are known to have been exposed. The incident has still grown into a wider reckoning. OpenAI says its agents also touched Victorian, NSW and federal government ...
Read more

Suncatcher TPU Satellite: How to Track It and What Happens Next

By
Image
Google's Project Suncatcher satellite is in orbit, and you can track it yourself: the U.S. Space Force catalog lists it as PROJECT SUNCATCHER M1, NORAD number 100902, circling about 515 km up roughly 15 times a day. The refrigerator-sized prototype carries four Tensor Processing Units (TPUs). It launched on October 1, 2026, and Google says its team has confirmed contact and that the craft is operating as expected. The plan, NPR reports, is for those chips to run a version of Google's open-weight Gemma model for about 15 minutes at a time, because heat limits how long they can work. Updated October 20, 2026. What happens next is mostly a wait for data. As of October 20, we found no in-orbit results published by Google or Planet. Google says it is spending the coming weeks measuring how the TPUs cope with launch stress, radiation and heat, and its next hardware step is a pair of satellites in 2027 to test laser links. The flight is the first in-orbit test of Project Suncatch...
Read more

Gemini 4 Argon: How to Get Access (Plan, API Steps, Fairwind)

By
Image
Gemini 4 Argon is public, but you need a paid plan to get it. Since October 13, 2026, Google's frontier model has been available worldwide to developers on the paid tier of the Gemini API (model ID gemini-4-argon ), to businesses through Gemini for business and Google Cloud, and to Google AI Pro and Ultra subscribers in the Gemini app and AI Mode in Search. Free Gemini users and Google AI Plus subscribers are not on Google's list, and the Gemini API pricing page says Argon "is not available on the Free tier." Updated October 20, 2026. Access has widened once since launch. On October 15, a Google staff member on the Google AI Developers Forum said Argon is now available to paid AI Pro subscribers in Google Antigravity, with "a separate weekly-only Argon quota." Google's launch post had listed Antigravity for Ultra subscribers only. You no longer need the Fairwind Program to use the standard model. Fairwind now matters only to vetted cyber defenders ...
Read more