Google denies Gmail hack claims; says 183 million accounts are safe; here’s how to verify yours

Gmail password leak

Google has clarified that Gmail remains secure after reports surfaced claiming that over 183 million Gmail credentials were part of a major data leak. The company said these claims were misleading, confirming that the data originated from previously compromised sources and not from a new Gmail-specific breach.

According to Google, Gmail’s security infrastructure is intact and there has been no fresh attack targeting its systems. The tech giant explained that the leaked email credentials came from “infostealer” databases — collections of old stolen information compiled from unrelated online breaches — rather than a direct compromise of Google’s servers.

Google’s official statement
“These reports do not reflect a new attack or a breach of Gmail,” Google said in a post on X. The company emphasized that its automated systems, which protect billions of Gmail accounts worldwide, continue to block unauthorized access attempts daily.
Google also urged users to enable passkeys and two-step verification (2SV) to enhance protection. Whenever compromised credentials appear in public dumps, Google automatically assists users in resetting passwords and securing affected accounts.

How to check if your Gmail account was exposed
While Google has confirmed there is no new Gmail breach, users can still take precautionary steps to ensure their credentials haven’t been compromised in older leaks. Here are three trusted tools to use:

Have I Been Pwned (HIBP) – Created by cybersecurity researcher Troy Hunt, this free website lets you check whether your email address has appeared in any known data breaches. Visit haveibeenpwned.com, enter your Gmail address, and view details of any leaks connected to it.

Google Password Manager – Built into Chrome and Android, this tool alerts you if any of your saved passwords have been exposed in a breach. It also helps generate strong replacements automatically.

Google’s Dark Web Report – Available via Google One and in some regions directly in account settings, this feature scans the dark web for any mention of your personal information — such as your Gmail address, phone number, or passwords.

Stay secure
Google’s reassurance comes after cybersecurity researcher Troy Hunt discovered a massive 3.5-terabyte database of leaked credentials, many of which included Gmail accounts from past incidents. Google reiterated that none of these came from a new breach. Users are advised to stay cautious, update passwords regularly, and enable two-factor authentication to keep their Gmail accounts safe.