No, There Was No “Major Gmail Security Breach”

Reports of a so-called “major Gmail security breach” circulated widely, but Google issued a clarification emphasising that these claims were entirely false. According to Google, the reports were confused with a phishing attack that occurred in June, where hackers exploited a Salesforce vulnerability to target a limited number of accounts; by 8 August Google had notified and assisted the affected users, and there was no blanket warning issued to all Gmail users.

Gmail’s protections, Google noted, are strong and effective, with AI-driven and multilayered defence systems that block over 99.9% of phishing and malware emails daily. The piece also warns that phishing and cyberattacks continue to evolve, underscoring the importance of user vigilance, strong unique passwords, and the adoption of passkeys to mitigate risks of stolen or reused credentials. It concludes by stressing the need for accurate information and sound security practices as essential to reducing risk.