Millions of Email Passwords, Including Gmail, Exposed in Recent Data Leak
Recent breach exposes 183 million email credentials, putting users at risk of hacking and identity theft.
A major cyber incident has exposed more than 183 million email passwords, including millions linked to Gmail accounts, making it one of the biggest data leaks ever discovered by security experts. The leaked files, measuring about 3.5 terabytes, were uncovered by Troy Hunt, the creator of Have I Been Pwned, who has been tracking data breaches worldwide.
This breach was not due to a direct attack on Gmail or other email providers. Instead, the passwords were collected through “infostealer” malware, which infects users’ computers and records login details as people access their email and other websites. About 16.4 million of these email addresses had never been involved in any previous leaks, increasing the risk for those users.
Security researchers warn that these leaked credentials may allow hackers to access not only email accounts but also other linked services. Users are strongly advised to check if their account is affected by visiting HaveIBeenPwned.com. If an email address is listed, it is important to change passwords immediately and enable two-factor authentication, which adds extra protection even if a hacker has your password.
Google confirmed that its own systems were not hacked and emphasized the risk comes from malware infections on people’s devices, not a direct Gmail breach. The company urges users to set up two-step verification and consider using passkeys for added security.
Analysts also report that infostealer malware is on the rise, with stolen credentials increasing by 800% in the first half of 2025. These attacks typically begin with phishing emails, fake software downloads, and malicious browser extensions. Users are encouraged to stay vigilant and regularly update their passwords to stay safe online.
