Salesforce-hosted Google database breach exposes Gmail user data

A major data breach linked to Google’s cloud infrastructure has put the accounts of billions of Gmail users at heightened risk, even as Google says passwords were not compromised. Hackers reportedly gained access to a Salesforce-hosted Google database in June, exposing general customer and company information and triggering a wave of phishing and impersonation attempts aimed at Gmail and Google Cloud users. In parallel, experts warn that a newer class of AI-focused threats is rapidly evolving, underscoring the need for stronger authentication and vigilant user behavior.

Officials confirmed that the attackers accessed a large repository containing contact details for a substantial portion of Gmail’s user base. While sensitive credentials like passwords appear not to have been taken, the exposed data increases the likelihood that scammers will craft convincing, targeted spear-phishing and vishing attempts. Early online chatter from affected users described calls and messages purporting to be from Google staff, urging urgent account actions and password resets. Security professionals emphasize that even without passwords, wide-ranging contact data can be weaponized to hijack...