Yesterday we reported that as many as five million Gmail accounts with usernames and passwords had leaked online. The dump was first posted on a Russian Bitcoin forum. It became evident yesterday that the leak wasn’t caused by a breach in Google’s systems, instead these accounts were leaked through third party websites. Google has confirmed that there was no breach of its systems and it offers several tips to those who might have been affected by this leak.
According to Google it found that less than 2 percent of the username and password combinations that appeared online “might have worked,” any attempts to access those accounts would have been thwarted by its automated anti-hijacking systems. Google also says that it protected affected accounts and required those users to reset their passwords.
Google reiterated that the leak was not caused by a breach in its systems. One of the most common causes behind such dumps is basic human nature. Users often use the same password across all online services. A leak from one service ends up compromising their entire online life which can have devastating effects.
The easiest way to secure yourself against such leaks is by using multiple passwords for different online services. Google suggests using strong passwords particularly for the Google account, updating recovery options and turning on 2-step verification to add an extra layer of security.