Refuting the news of data leak of 2.5 billion Gmail users

Google recommends Gmail users immediately change their passwords, enable two-factor authentication (2FA) or password lock, and sign up for advanced security features

In a statement on September 2, Google denied the information about sending an "urgent warning" to 2.5 billion Gmail users that was widely spread on social networks. This technology "giant" affirmed that Gmail's protection measures are very strong and effective.

While Google insists that no passwords or Gmail systems were directly compromised, the attack – believed to have been carried out by the notorious hacking group ShinyHunters – exposed business email addresses and contact information. Even seemingly harmless information can be used to create convincing phishing schemes, according to Gulf News.

Google headquarters in Mountain View, California - USA Photo: AP

Some reports suggest the first signs of unauthorized access came in June 2025, when attackers impersonated IT support staff and tricked an employee into installing malware on Salesforce systems. By August 2025, Google confirmed multiple successful intrusions and began notifying affected users on August 8.

In light of the threat, Google is recommending that Gmail users immediately change their passwords, enable two-factor authentication (2FA) or password lock, and enroll in advanced security features. The tech company is also urging users to run a security checkup to review their connected devices and apps.

The incident is one of the largest security alerts in Google's history, and an important reminder that interconnected digital systems can inadvertently increase risks even when the core systems remain secure.

Source: https://nld.com.vn/bac-bo-tin-ro-ri-du-lieu-25-ti-nguoi-dung-gmail-196250902205134219.htm