Gmail security alert: Google has a ‘warning’ for 2.5 billion users and how can you safeguard your account

Google has issued a critical security alert impacting its 2.5 billion Gmail users worldwide, following reports of multiple breaches that exposed significant vulnerabilities in user accounts. Reportedly, millions of accounts were potentially at risk, making this one of the largest security warnings in recent years.According to a report by Trend Micro, following its comprehensive analysis of a recent security breach, Google began notifying affected users on August 8. The company stated that the compromised data was primarily “publicly available business information.”

Why Google issued security alert for Gmail users

According to reports, Gmail was attacked, primarily by phishing scams which are highly sophisticated emails designed to steal login information. Users were redirected to convincing fake sign-in pages or tricked into revealing their

two-factor authentication

(2FA) codes, granting cybercriminals full access to their accounts.

How hackers gained access to Gmail accounts

Cybercriminals employed a multi-layered strategy to bypass security protections. They sent highly convincing emails that mimicked legitimate communications from Google. These emails often contained links to counterfeit login pages. Unsuspecting users entered their Gmail credentials or 2FA codes, unknowingly handing over control of their accounts.

Separately, Google confirmed a breach involving its Salesforce database. This attack was linked to ShinyHunters, a notorious group known for targeting high-profile companies like AT&T and Microsoft.

Google’s recommendations for Gmail users

To drastically reduce the risk of hacking, Google recommends several crucial actions.First and foremost is to choose a strong, unique password that isn't used for any other service.Enable Two-Factor Authentication (2FA) as it adds an essential extra layer of security. Even if hackers obtain your password, they won't be able to access your account without a secondary verification code.Always be suspicious of emails that ask for personal information or direct you to unfamiliar websites. Double-check sender email addresses and links before entering any credentials. Review Account Activity Regularly as periodically checking Gmail account’s login history and connected devices to spot any unusual or unauthorised access.