A massive data breach has put millions of Gmail users at risk. Around 183 million email addresses and passwords have been exposed online through a newly discovered database. Cybersecurity experts warn that this leak not only compromises Gmail accounts but could also endanger other online services linked to the same email addresses.
183 million Gmail passwords leaked
The breach reportedly took place in April 2025 but was only recently identified by Have I Been Pwned, a well-known website that tracks data breaches. The platform’s founder, Troy Hunt, confirmed that the leaked information was not from a single source but rather collected from multiple hacked databases across the internet, forming one of the largest compilations of compromised credentials to date.
This situation raises serious concerns since the exposed data could allow attackers to gain access to social media accounts, cloud services, and online shopping platforms associated with those Gmail addresses.
According to Have I Been Pwned’s data, the site has recorded over 15 billion compromised accounts from more than 900 breached websites. Users can visit the platform to check whether their email addresses were affected by this latest incident.
Security specialists advise Gmail users to change their passwords immediately and enable two-factor authentication (2FA) to secure their accounts. Two-step verification adds an extra layer of protection by requiring a second form of confirmation such as an SMS code, mobile prompt, or hardware key, even if the password has been stolen.
Google’s security system automatically selects the most effective verification method for each situation, making it significantly harder for hackers to gain unauthorized access. Experts also emphasize that users should avoid reusing passwords across multiple platforms. Using a password manager to generate and store strong, unique passwords is one of the safest approaches.
With 183 million credentials exposed, this incident stands among the largest Gmail-related data breaches in recent years. It serves as a reminder that modern cybersecurity depends on more than just strong passwords; multi-layered protection is essential for keeping personal data safe.
