Google says reports of a 'huge' Gmail breach affecting millions of users are false, again
This is the second time in three months that Google has been forced to quash Gmail breach claims
Google has hit back at claims of a massive Gmail breach, suggesting recent reports stem from a “misunderstanding of infostealer databases”.
In a post on X, the tech giant insisted Gmail's defenses are “strong, and users remain protected” in a bid to calm customer concerns.
“The inaccurate reports are stemming from a misunderstanding of infostealer databases, which routinely compile various credential theft activity occurring across the web,” Google said.
“It’s not reflective of a new attack aimed at any one person, tool, or platform.”
The company’s sharp response comes after a host of publications reported that 183 million Gmail accounts had been compromised in what one outlet described as a "huge data breach".
Speculation over a breach mounted after a sizable dataset was added to the Have I Been Pwned database, which allows web users to check if their credentials have been compromised.
In a blog post dissecting the dataset, which was collated by researchers at Synthient, creator Troy Hunt noted these records were the culmination of several years’ worth of infostealer activity, instead of a newly discovered breach.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Regardless, several outlets pounced on the situation. In response to a comment under his original blog post, Hunt echoed Google’s response to the coverage.
“I think they're deliberately misleading and designed to drive eyeballs on ads whilst the truth gets buried somewhere further down in the story,” he wrote.
Gmail breach claims are a dime a dozen
This isn’t the first time Google has been forced to push back against reports of a Gmail breach. Indeed, it’s the second in the space of three months.
In late August, reports of a major incident that impacted some 2.5 billion Gmail accounts began circulating online, once again prompting a statement from the tech giant in which it refuted the claims.
In a blog post, Google described reports as “entirely false” and said there was no risk to users.
"We want to reassure our users that Gmail’s protections are strong and effective,” the company said.
“Several inaccurate claims surfaced recently that incorrectly stated that we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.”
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- Warning issued over critical flaws spotted in TP-Link routers
- CISA issues alert after botched Windows Server patch exposes critical flaw
- Enterprises can’t keep a lid on surging cyber incident costs

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.
He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.
For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.
-
The business guide to Windows 11In-depth As Windows 10's mainstream support ends, it's time for businesses who have yet to upgrade to take a second look at Windows 11
-
Document management systems (DMS) in the AI era: How to choose the right solution to create a trusted foundation for your businessSupported In the AI era, documents are no longer just records — they’re strategic assets. A modern DMS provides the secure, intelligent foundation firms need to harness AI, ensure compliance, and build lasting digital confidence
-
Enterprises can’t keep a lid on surging cyber incident costsNews With increasing threats and continuing skills shortages, AI tools are becoming a necessity for some
-
Cyber researchers have already identified several big security vulnerabilities on OpenAI’s Atlas browserNews Security researchers have uncovered a Cross-Site Request Forgery (CSRF) attack and a prompt injection technique
-
CISA issues alert after botched Windows Server patch exposes critical flawNews A critical remote code execution flaw in Windows Server is being exploited in the wild, despite a previous 'fix'
-
Former NCSC head says the Jaguar Land Rover attack was the 'single most financially damaging cyber event ever to hit the UK' as impact laid bareNews Researchers said they place the UK financial impact of the attack on Jaguar Land Rover at around £1.9 billion.
-
Volkswagen confirms security ‘incident’ amid ransomware breach claimsNews Volkswagen has confirmed a security "incident" has occurred, but insists no IT systems have been compromised.
-
Cyber experts have been warning about AI-powered DDoS attacks – now they’re becoming a realityNews DDoS attackers are flocking to AI tools and solutions to power increasingly devastating attacks
-
Microsoft issues warning over “opportunistic” cyber criminals targeting big businessNews Microsoft has called on governments to do more to support organizations
-
Europol takes down SIM farm network that scammed thousands of victimsNews The sophisticated operation led to crimes from simple phishing to investment fraud