US EditionEmergency alert: Google warns 2.5B Gmail users to update passwords after major hack
The ShinyHunters group exploited compromised OAuth tokens and social engineering to access data, prompting Google to advise 2.5 billion users to enhance security and update passwords.
- On August 27, 2025, Google warned 2.5 billion Gmail users to update passwords and tighten security after a breach tied to a corporate Salesforce instance, completing direct notifications on Aug. 8.
- Analysis shows compromised OAuth tokens were exploited between 8 and 18 August as UNC6040 linked to ShinyHunters used voice phishing and impersonation to breach Google's Salesforce instance.
- Google reported the exposed records were limited to basic publicly available business information, and consumer Gmail and Google Cloud accounts were not compromised; mitigation and containment actions began promptly.
- Users face increased phishing and vishing attempts after the breach, with attackers using vishing calls from 650 area code and impersonation of IT staff to steal credentials and extort Gmail users.
- ShinyHunters' history shows it previously targeted Santander, AT&T, Allianz, Microsoft and Ticketmaster, and Google warned it may escalate extortion by launching a data leak site.
Insights by Ground AI
Does this summary seem wrong?
25 Articles
25 Articles
Coverage Details
Total News Sources25
Leaning Left1Leaning Right2Center11Last UpdatedBias Distribution79% Center
Bias Distribution
- 79% of the sources are Center
79% Center
C 79%
14%
Factuality
To view factuality data please Upgrade to Premium
