On August 30, 2025, Google issued an emergency warning to its 2.5 billion Gmail users following a significant data breach involving a Salesforce cloud platform. The breach, attributed to the notorious hacking group ShinyHunters, exposed basic business contact information, such as names and company details, but no passwords were compromised. However, cybercriminals are exploiting this data to launch sophisticated phishing and vishing (voice phishing) attacks, impersonating Google support staff to trick users into sharing login credentials.
Google’s Threat Intelligence Group first detected the breach in June 2025 and notified affected users by August 8. The company urges users to update passwords, enable two-factor authentication (2FA), and be cautious of suspicious emails or calls, especially those from the 650 area code. Google also recommends using passkeys, which rely on biometric authentication, to enhance security. While Gmail’s systems remain secure, the ongoing wave of scams highlights the need for vigilance. Users can run a Google Security Checkup to strengthen account protections and verify suspicious communications using tools like Trend Micro’s ScamCheck.