Claude Code has been handing users’ email addresses to the websites it visits

Anthropic’s Claude Code AI agent has been inadvertently including users' email addresses in User-Agent request headers during web searches. A GitHub bug report highlighted that the behavior stemmed from internal system instructions telling the model who the user is, which some websites request for automated tool identification. Anthropic released a built-in privacy mod called cc-plugin-privacy to block this behavior by default, though some users report the fix does not always catch every instance. Open article →