THE SHORT VERSION

Claude Code sent users' emails to every site it searched

Satirical cartoon: a cheerful Claude Code robot hands YOUR EMAIL cards to website storefronts while a security robot's REGEX net catches only the USER-AGENT card and the rest escape through the WEBFETCH door, on plain white paper. — Machine Age Cartoon · Zimbo

A developer filed issue #107757 on November 5 saying Claude Code divulged his email to third parties in the User-Agent header while conducting web searches without permission, and blaming it for “dozens of scam emails per day.”

Anthropic replied that the cc-plugin-privacy mod in v2.1.317 and later deterministically blocks the behavior, and asked to be told of any gaps — the dev.to test filed exactly that gap report the same day.