Google Data Breach: 2.5 Billion Gmail Accounts at Risk

Google has confirmed a massive data leak but reassured users that their passwords remain intact. The breach, carried out by the hacker group ShinyHunters, targeted Salesforce databases and exposed information linked to 2.5 billion Gmail accounts, including names, company details, and other personal data. While login credentials were not compromised, experts stress that the likelihood of phishing attempts has significantly increased.

Reports on Reddit suggest that some users have already received phone calls from individuals posing as Google employees, claiming to assist with the breach. These scammers attempt to trick users into resetting their passwords, giving criminals the chance to seize control of accounts. Another method involves so-called «dangling buckets» — outdated Google Cloud access points that hackers can exploit to inject malicious code.

In response, Google is urging users to take proactive steps: complete a security checkup, activate advanced protection, and adopt passkeys as a safer alternative to traditional passwords. As cyberattacks grow more sophisticated, the company emphasizes that vigilance and caution remain the strongest defenses.