Google says reports of a 'huge' Gmail breach affecting millions of users are false, again
This is the second time in three months that Google has been forced to quash Gmail breach claims
Google has hit back at claims of a massive Gmail breach, suggesting recent reports stem from a “misunderstanding of infostealer databases”.
In a post on X, the tech giant insisted Gmail's defenses are “strong, and users remain protected” in a bid to calm customer concerns.
“The inaccurate reports are stemming from a misunderstanding of infostealer databases, which routinely compile various credential theft activity occurring across the web,” Google said.
“It’s not reflective of a new attack aimed at any one person, tool, or platform.”
The company’s sharp response comes after a host of publications reported that 183 million Gmail accounts had been compromised in what one outlet described as a "huge data breach".
Speculation over a breach mounted after a sizable dataset was added to the Have I Been Pwned database, which allows web users to check if their credentials have been compromised.
In a blog post dissecting the dataset, which was collated by researchers at Synthient, creator Troy Hunt noted these records were the culmination of several years’ worth of infostealer activity, instead of a newly discovered breach.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Regardless, several outlets pounced on the situation. In response to a comment under his original blog post, Hunt echoed Google’s response to the coverage.
“I think they're deliberately misleading and designed to drive eyeballs on ads whilst the truth gets buried somewhere further down in the story,” he wrote.
Gmail breach claims are a dime a dozen
This isn’t the first time Google has been forced to push back against reports of a Gmail breach. Indeed, it’s the second in the space of three months.
In late August, reports of a major incident that impacted some 2.5 billion Gmail accounts began circulating online, once again prompting a statement from the tech giant in which it refuted the claims.
In a blog post, Google described reports as “entirely false” and said there was no risk to users.
"We want to reassure our users that Gmail’s protections are strong and effective,” the company said.
“Several inaccurate claims surfaced recently that incorrectly stated that we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.”
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- Warning issued over critical flaws spotted in TP-Link routers
- CISA issues alert after botched Windows Server patch exposes critical flaw
- Enterprises can’t keep a lid on surging cyber incident costs

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.
He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.
For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.
-
OpenAI says future models could have a ‘high’ security riskNews The ChatGPT maker wants to keep defenders ahead of attackers when it comes to AI security tools
-
Why Dell PowerEdge is the right fit for any data center needAs demand rises for RAG, HPC, and analytics, Dell PowerEdge servers provide the broadest, most powerful options for the enterprise
-
Researchers claim Salt Typhoon masterminds learned their trade at Cisco Network AcademyNews The Salt Typhoon hacker group has targeted telecoms operators and US National Guard networks in recent years
-
Trend Micro issues warning over rise of 'vibe crime' as cyber criminals turn to agentic AI to automate attacksNews Trend Micro is warning of a boom in 'vibe crime' - the use of agentic AI to support fully-automated cyber criminal operations and accelerate attacks.
-
Cyber budget cuts are slowing down, but that doesn't mean there's light on the horizon for security teamsNews A new ISC2 survey indicates that both layoffs and budget cuts are on the decline
-
NCSC issues urgent warning over growing AI prompt injection risks – here’s what you need to knowNews Many organizations see prompt injection as just another version of SQL injection - but this is a mistake
-
Chinese hackers are using ‘stealthy and resilient’ Brickstorm malware to target VMware servers and hide in networks for months at a timeNews Organizations, particularly in the critical infrastructure, government services, and facilities and IT sectors, need to be wary of Brickstorm
-
AWS CISO Amy Herzog thinks AI agents will be a ‘boon’ for cyber professionals — and teams at Amazon are already seeing huge gainsNews AWS CISO Amy Herzog thinks AI agents will be a ‘boon’ for cyber professionals, and the company has already unlocked significant benefits from the technology internally.
-
The Scattered Lapsus$ Hunters group is targeting Zendesk customers – here’s what you need to knowNews The group appears to be infecting support and help-desk personnel with remote access trojans and other forms of malware
-
Impact of Asahi cyber attack laid bare as company confirms 1.5 million customers exposedNews No ransom has been paid, said president and group CEO Atsushi Katsuki, and the company is restoring its systems