A massive breach of Gmail accounts has been confirmed, with 183 million email addresses and passwords surfacing online. Users are advised to update their credentials immediately.
According to the breach monitoring service Have I Been Pwned (HIBP), run by cybersecurity researcher Troy Hunt, the leaked data includes website URLs, email addresses, and plaintext passwords. The data was drawn from "stealer logs" and credential-stuffing lists from April 2025.
The leak was added to the HIBP database after Hunt published his analysis of the compilation, which consisted of 3.5 terabytes of data and roughly 23 billion rows of login information. Each record typically included the site URL, the user's email, and the password.
Users are urged to update their credentials immediately.
The breach highlights the importance of regularly updating passwords and using unique credentials for each account.
Author's summary: Gmail breach affects 183 million accounts.