Gmail Credential Leak: What Users Should Know

A report from Top Class Actions details a sprawling collection of so-called 'stealer logs' — credentials harvested by malware — that reportedly contains more than 183 million compromised passwords linked to email addresses and websites. Much of the exposed data reportedly involves Gmail accounts, though the compiled logs span numerous online services, not just Google. The trove reportedly came to light on October 27, 2025. Google has pushed back on characterizing this as a breach of its own infrastructure, saying the credentials were pulled together from malware and info-stealer logs rather than any hack of Gmail's servers.