Security researchers are sounding the alarm about mass stolen Gmail credentials. Millions of users could be affected without knowing it.
A leading IT security researcher assumes that access data for around 48 million Gmail accounts have appeared on the Internet. According to Jeremiah Fowler, he discovered a database with a total of 149 million stolen user IDs and passwords from major online services. The data should come from users from all over the world, like the expert in one Blog post writes.
Reaction from Google: Data leak is well known
Opposite the British newspaper ““Daily Mail” A Google spokesman said the company was aware of reports about the data set, which “contains a wide range of credentials, including some from Gmail.” But this is not a new incident.
According to the company, the package is based on protocols from so-called information theft programs, i.e. malware that collects access data from private devices.

Massive Gmail data leak: protective measures for users
The GoogleSpokesperson emphasized, according to the Daily Mail, that this data has been “aggregated over time” and that such activities are continuously monitored. Accounts would be automatically locked and password resets enforced as soon as exposed credentials are detected.
- Fowler advises those affected to change their password.
- The operating system and security software should also be updated.
- Users should check their app permissions and only install applications from official app stores.
Gmail: This is what you should know about the popular email service
- According to the Clean Email site, Gmail has more than 2.5 billion active users worldwide (as of November 2025).
- Over 120 billion emails are sent every day. Most users open Gmail primarily via the mobile app.
- Google blocks billions of spam and phishing emails every day and protects accounts very effectively. Many companies use Gmail for work because it works well with other Google services.
The planned change of email address, which will soon be possible for Gmail users, also attracts fraudsters. Experts warn of one Wave of phishing attempts.