Google says reports of a 'huge' Gmail breach affecting millions of users are false, again

This is the second time in three months that Google has been forced to quash Gmail breach claims

Gmail logo and branding pictured on a smartphone screen with laptop keyboard pictured in background.
(Image credit: Getty Images)

Google has hit back at claims of a massive Gmail breach, suggesting recent reports stem from a “misunderstanding of infostealer databases”.

In a post on X, the tech giant insisted Gmail's defenses are “strong, and users remain protected” in a bid to calm customer concerns.

“The inaccurate reports are stemming from a misunderstanding of infostealer databases, which routinely compile various credential theft activity occurring across the web,” Google said.

“It’s not reflective of a new attack aimed at any one person, tool, or platform.”

The company’s sharp response comes after a host of publications reported that 183 million Gmail accounts had been compromised in what one outlet described as a "huge data breach".

Speculation over a breach mounted after a sizable dataset was added to the Have I Been Pwned database, which allows web users to check if their credentials have been compromised.

In a blog post dissecting the dataset, which was collated by researchers at Synthient, creator Troy Hunt noted these records were the culmination of several years’ worth of infostealer activity, instead of a newly discovered breach.

Regardless, several outlets pounced on the situation. In response to a comment under his original blog post, Hunt echoed Google’s response to the coverage.

“I think they're deliberately misleading and designed to drive eyeballs on ads whilst the truth gets buried somewhere further down in the story,” he wrote.

Gmail breach claims are a dime a dozen

This isn’t the first time Google has been forced to push back against reports of a Gmail breach. Indeed, it’s the second in the space of three months.

In late August, reports of a major incident that impacted some 2.5 billion Gmail accounts began circulating online, once again prompting a statement from the tech giant in which it refuted the claims.

In a blog post, Google described reports as “entirely false” and said there was no risk to users.

"We want to reassure our users that Gmail’s protections are strong and effective,” the company said.

“Several inaccurate claims surfaced recently that incorrectly stated that we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.”

Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.

MORE FROM ITPRO

TOPICS
Ross Kelly
News and Analysis Editor

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.

He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.

For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.