Why is Google pushing 2.5 billion Gmail users to update passwords?

Google has issued an urgent warning to over 2.5 billion Gmail users worldwide to update their passwords following a recent third-party Salesforce data breach.

While customer data on Gmail and Google Cloud was not compromised, the breach exposed publicly available business information that hackers are exploiting in increased cyberattacks.

The company’s Threat Intelligence Group revealed a rise in successful intrusions where attackers used social engineering tactics, including impersonating IT support staff, to gain unauthorized access.

Google emphasizes the importance of enhancing account security practices in response.

What triggered the alert?

Earlier this month, Google disclosed that a Salesforce database used by the company was breached, exposing valuable business information. Although this did not affect consumer Gmail or Google Cloud accounts directly, hackers have leveraged the data for more aggressive phishing and hacking attempts targeting users.

Google highlighted the involvement of the 'ShinyHunters' cybercrime group in this campaign, which is known for escalating extortion by launching data leak sites.

These new cyber threats prompted Google to advise all users to change passwords and enable additional security layers.

Did you know?
The 'ShinyHunters' cybercrime group, linked to the breach, is known for escalating extortion tactics through data leak sites (DLS).

How should users protect their Gmail accounts?

Google recommends that users regularly update their passwords and enable two-factor authentication for stronger protection.

Users should also be vigilant against suspicious emails and social engineering attacks that could steal login information.

ALSO READ | What caused the SSD failure rumors after the Windows update?

Steps to change your Gmail password

To update passwords on a web browser, users need to access their Google Account settings, navigate to 'Security,' and then 'Password.' After confirming their identity, they should set a new strong password.

For Android devices, users can change passwords through the device settings under Google account management, while iPhone and iPad users can do so via the Gmail app’s account management features.

Since many users have unique passwords but do not update them frequently, Google's alert serves as a critical reminder to improve security and guard against emerging cyber threats.

Looking ahead

As cyberattack tactics evolve, Google’s warning highlights the need for heightened awareness and proactive measures among billions of users. Strengthening password hygiene and embracing multi-factor authentication will be essential to protect personal data and maintain digital trust.