Why Google is really warning 2.5 billion Gmail users to stop using their passwords

You may have seen warnings that Google is telling all of its users to change their Gmail passwords due to a breach. That’s only partly true. Google is telling users to change their passwords, but not because of a breach that exposed them. In fact, Google’s real advice is to stop using your password altogether. Here’s what I mean.

The breach traces back to Salesforce, whose systems were compromised by the hacker group known as ShinyHunters (also tracked as UNC6040). Attackers obtained business-related Gmail data, including contact lists, company associations, and email metadata. No actual Gmail account credentials were stolen, but the nature of the stolen data makes phishing and impersonation attacks far more dangerous.

Google confirmed the link between the Salesforce breach and a rise in