Google Warns: 2.5 billion Gmail passwords were stolen, this is how to save your account..

Google has issued a major security alert, warning that about 2.5 billion Gmail accounts may have been exposed in a massive data theft campaign. The company's Threat Intelligence Group (GTIG) has linked the breach to a threat actor called UNC6395, who targeted the accounts between August 8 and August 18, 2025.

Breach details

According to Google's advice, the attackers gained access to Gmail data using compromised authentication tokens from third-party integrations. Once inside, the attacker systematically pulled large amounts of account data, including usernames, email addresses, login details, and, in some cases, stored credentials associated with other cloud services.

According to the report, the attackers discovered sensitive information such as Amazon Web Services (AWS) keys, enterprise login URLs, and Snowflake access tokens. Google said that although the group tried to delete query jobs to cover its tracks, logs were preserved and can be used by organizations and users to verify exposure.

Impact on users
While Google has not confirmed how much personal user data has been directly exploited, the company said the scale of the breach is such that Gmail accounts around the world may be affected. There is no evidence of Gmail's core systems being compromised. Instead, the breach occurred through a third-party integration that allowed attackers to extract data associated with Gmail accounts.

What you should do
Google is urging all Gmail users to do the following immediately:

• Reset passwords and enable two-factor authentication (2FA) if not already enabled.

• Check recent login activity in Gmail settings to identify suspicious access attempts.

• Revoke app permissions by visiting the Google Account Security dashboard and removing unfamiliar third-party apps.

• Change credentials associated with Gmail, such as API keys or login details stored in messages.

• Be alert to phishing attempts, as attackers can use stolen data to create targeted scams.

Disclaimer: This content has been sourced and edited from News 18 hindi. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.