183 Million Accounts Breached: Gmail Passwords Confirmed Compromised
In a significant data breach, 183 million account credentials have been confirmed compromised, impacting numerous users globally. This leak includes confirmed Gmail passwords and additional sensitive information.
Details of the Breach
This incident follows a previous large-scale leak disclosed on May 22, including over 184 million passwords affecting major platforms like Apple and Facebook. The recent breach, revealed in April 2025, has added alarming details about the nature of the leaked data.
Insights from Have I Been Pwned
Troy Hunt, the owner of the Have I Been Pwned (HIBP) database, confirmed that the data comprises both stealer logs and credential stuffing lists. His platform serves as a vital resource for users concerned about their online security.
Data Characteristics
- Total Accounts Breached: 183 million
- Average Size of Database: 3.5 terabytes
- Entries Monitored: 23 billion rows
- New Credentials Detected: Approximately 16.4 million
Analysis of Leaked Data
According to Benjamin Brundage from Synthient, the data was sourced from monitoring various infostealer platforms over nearly a year. Hunt’s analysis revealed that, despite a large portion of these credentials being recycled, a significant 8% is fresh, affecting around 16.4 million previously unsecured addresses.
Advice for Affected Users
It is crucial for all users, not just Gmail account holders, to verify if their credentials are among the stolen data. Those who find their passwords compromised should change them immediately. Additionally, users are advised against reusing passwords across multiple platforms to mitigate further risks.
What You Should Do
- Check your email address on Have I Been Pwned to see if your account is compromised.
- If impacted, change your passwords for affected accounts without delay.
- Consider using password managers to enhance security and avoid repetition.
Troy Hunt and the HIBP team continue to investigate the breach while encouraging users to remain vigilant. It’s important to stay informed about potential threats to your online security.
