Claude Code leaks user email addresses to websites
The gist
A GitHub user filed issue #107757 saying Claude Code sent their email to third parties in the User-Agent header during web searches.
The report is unconfirmed by Anthropic, and the user says they are moving their company off the tool.
How it unfolded
- Oct 30, 2026A Reddit post in r/ClaudeCode said Claude Code admitted it had included the user's personal email address in an HTTP request while downloading a filing from SEC.gov.
- Nov 5, 2026GitHub user taylor-edwards opened issue #107757, reporting that Claude Code sent the user's email to third parties in the User-Agent request header during web searches without permission.
- Nov 5, 2026GitHub actions added labels bug, platform:macos, area:security and area:tools to the issue; user Netkas commented.
Key terms
- User-Agent header
- An HTTP header that identifies the client software making a request to a server.
Source: Wikipedia