5 Million Gmail Accounts Leaked

MSP-IT

I have the email file (zip or raw txt) if anyone is interested. Also willing to check emails at request through PM. I found two of my own accounts and a few family members. The passwords were old but still valid for the family members.

PM me if you need the private link.

http://rt.com/news/186580-millions-google-accounts-leaked/

Iristheangel

And this is why 2-factor authentication exists. :P

mokaiba

Changed my password a little while ago but still would like to know if other family members are affected.

Not sure how valid this site is, but doesnt hurt to check: Was your Gmail password leaked? 5 million account passwords published online!

Zartanasaurus

Neither of mine leaked. The passwords were stored in plain-text?

MSP-IT

mokaiba wrote: »

Changed my password a little while ago but still would like to know if other family members are affected.

Not sure how valid this site is, but doesnt hurt to check: Was your Gmail password leaked? 5 million account passwords published online!

I wouldn't really trust public sites like that.

Zartanasaurus wrote: »

Neither of mine leaked. The passwords were stored in plain-text?

Not sure about storage, but the password were dumped in plaintext.

RomBUS

Good thing I have the two factor on the Gmail account I care about.

The other one is for crap/spam/misc

Deathmage

Just enabled two-factor security on mine. Thanks for this enlightening post!

NightShade03

+1 for 2FA

For those that want to check if they have been affected, check out https://haveibeenpwned.com/

It's run by Troy Hunt whole is very well respected in the security community. He follows a ton of major breaches so it checks for more than just the gmail leak.

lsud00d

It wasn't a hack on Google's systems, rather probably credential harvesting over a period of several years.

Google: No compromise, likely massive phishing database | Ars Technica

YFZblu

^ This.

phoeneous

I posted this a month ago, pretty sure it's related.

http://www.techexams.net/forums/off-topic/103007-russian-haxors-jack-ton-stuff.html

tpatt100

My "used to be main" email address popped up on the list, a while back I used a single email address for everything......

paulgswanson

*le sigh* They got my main one. Already changed it last night though.

karl88

None of my accounts got leaked. I'm not going to input my addresses in any of the many sites people are linking. I noticed a sharp rise in spam following responding to Craigslist job ads. Prior to that I barely received any spam. I don't need anymore, and sometimes legitimate stuff gets filtered there.

SephStorm

I'm not changing my passwords again. Just not doing it.

MTciscoguy

I have a script I wrote, that auto changes my passwords, every few days, so no worries for me and I never post anything that could compromised me in emails or chat systems like this.

MSP-IT

MTciscoguy wrote: »

I have a script I wrote, that auto changes my passwords, every few days, so no worries for me and I never post anything that could compromised me in emails or chat systems like this.

What kind of script? How does it interface with the web pages and how many accounts are linked?

MTciscoguy

MSP-IT wrote: »

What kind of script? How does it interface with the web pages and how many accounts are linked?

It is based on some technology we developed when I was in the military and could be used for nefarious intentions if someone was so inclined. I use it in 10 account blocks at various times during the week.