Gmail protections strong, effective; security warning claims false: Google

Google has rejected reports of a Gmail data breach, clarifying it has not sent any global password reset alerts and stressing that Gmail's security protections remain strong and effective

Don't want to miss the best from Business Standard?

Google has pushed back against reports alleging that Gmail had been compromised in a massive security incident impacting billions of users. Several outlets reported that the US-based technology giant had issued a worldwide advisory urging 2.5 billion Gmail users to change their passwords and take additional precautions. However, Google has confirmed that it has not issued any such advisory nor such alert was sent, dismissing the claims as inaccurate while underscoring that Gmail’s security remains strong and effective.

Background

Earlier this week, reports from several publications claimed that Google had raised a global alarm after a suspected data compromise. The reports alleged that Gmail users were being instructed to update their passwords due to a breach tied to one of Google’s Salesforce databases. They also pointed to a spike in phishing attacks, attributing some activity to groups such as ShinyHunters and other Russian-linked hacking collectives. According to the coverage, affected Gmail and Google Workspace accounts had supposedly been directly notified via email.

These articles went on to warn of phishing and “vishing” campaigns targeting Gmail users and highlighted two-factor authentication as a critical defence measure.

Google’s statement

In an official statement, the company said: “Gmail's protections are strong and effective, and claims of a major Gmail security warning are false. Several inaccurate claims surfaced recently that incorrectly stated that we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.”

Google further emphasised that Gmail’s built-in protections stop more than 99.9 percent of phishing and malware before they reach inboxes. It also stressed the need for accuracy in cybersecurity reporting and reaffirmed its commitment to keeping user accounts secure.

 

As part of its security guidance, the company advised users to remain alert to phishing attempts, make use of modern authentication tools like Passkeys, and report any suspicious activity.