No Gmail credentials were stolen in the hack, but business-related data like contact lists, company associations and email data were stolen, according to the report.
This kind of data makes phishing and impersonation attacks much more dangerous, because hackers can use it to craft attacks that look authentic and trick people into handing over their login credentials, the report said.
With those credentials giving them access to the victim’s email, hackers can then access any of the victim’s accounts that reset a password by sending an email, per the report.
Users can prevent these sorts of attacks from happening by ending their use of passwords and using passkeys instead, according to the report.
Passkeys can’t be phished because they don’t include passwords that a user could be tricked into sharing, the report said.
Advertisement: Scroll to Continue
Google’s Threat Intelligence Group said in an Aug. 5 update to a blog post that a hacking group had breached one of its Salesforce data systems used to house contact information and related notes for small and medium-sized businesses.
“The data retrieved by the threat actor was confined to basic and largely publicly available business information, such as business names and contact details,” the post said.
In that case, the company said its intelligence group suspected the hackers could be planning to “escalate their extortion tactics” by initiating a data leak site.
In one post in an Oct. 27 thread on X addressing false reports of a Gmail security breach, Google recommended the use of passkeys and shared a link to an article about protecting personal information with 2-Step Verification.
“Users can protect themselves from credential theft by turning on 2-step verification and adopting passkeys as a stronger and safer alternative to passwords, and resetting passwords when they are found in large batches like this,” Google said in the post, referring to various credential theft activity occurring across the web.
PYMNTS reported in May 2024 that several payments and financial services companies have introduced passkeys.
