Google Debunks False Gmail Breach Rumors as Credentials Leak Again

On 28 October 2025, Google debunked claims of a Gmail breach, clarifying that the discussion was about insecure account practices rather than a new attack. According to Google’s Security Team, media misinterpretations alleged that data from 2.5 billion Gmail accounts had been leaked; in reality the issue related to weak passwords and users not enabling multi-factor authentication.

The article notes that a recent Have I Been Pwned database update added 183 million credentials, but 91% of those entries were already present in previous collections and only about 16.4 million addresses were new. Google emphasised that reports of a widespread Gmail security breach are false and that Gmail’s defenses remain strong.

It advises affected users to update passwords and enable two-factor authentication to reduce future risk, and explains that leaked data often originates from third-party breaches where credentials were reused.