Google has confirmed that it suffered a massive cyberattack that exposed data linked to approximately 2.5 billion Gmail and Google Cloud accounts. Although the attackers did not gain access to passwords, they did obtain public and corporate information such as names and contact details, which has significantly increased the risk of targeted phishing and vishing attacks.
Security experts have warned about a rise in fraudulent calls pretending to be from Google employees, attempting to trick users into resetting and handing over their passwords. More sophisticated techniques have also been identified, such as exploiting outdated access links (“dangling buckets”) to inject malware or steal data from Google Cloud accounts.
Google urges users to remain vigilant:
The company emphasizes that it will never contact anyone directly by phone regarding security issues. They also recommend enabling tools such as Security Checkup, the Advanced Protection Program, using two-step verification, and adopting modern methods like passkeys to strengthen account protection against increasingly advanced threats.
Why is it crucial to act right now?
Because cybercriminals already have information that allows them to create highly convincing attacks. Without stronger security, many users could fall for scams designed to steal their accounts. Taking preventive measures today is essential to avoid serious consequences tomorrow.