- A theoretical tax on Bud Light has infuriated conservatives 4 Years Ago
- Tumblr is back on the iOS App Store as NSFW content ban looms 4 Years Ago
- Here’s why YouTube deleted 58 million videos and a ton of accounts 4 Years Ago
- The 25 worst passwords of 2018 4 Years Ago
- Little Miss Flint takes on Tomi Lahren’s border wall tweet Today 9:05 AM
- Michael Cohen contradicts Trump tweets, says president knew payments were wrong Today 8:39 AM
- Super Smash Bros. Ultimate girls blush when they eat curry, and fans are being horny on main Today 7:58 AM
- The 2nd gen Amazon Echo Show is a digital assistant game-changer Today 7:00 AM
- How to watch ESPNU online for free Today 7:00 AM
- ‘The Fix’ is another talk show Hail Mary from Netflix Today 6:45 AM
- 2018 was the year the ‘alt-right’ failed Today 6:20 AM
- The best Italian movies on Netflix Today 6:00 AM
- How to stream the 2018 college bowl games Today 6:00 AM
- Miss USA thought everyone spoke English—and the internet is not amused Thursday 8:02 PM
- Kanye’s Twitter tirade prompts apology from Drake Thursday 6:00 PM
5 million Gmail passwords leaked to Russian Bitcoin forum
Yes, you have to change your password again.
Much of the information is old and potentially out-of-date, Google representatives told Russian media, so the so-called “leak” may be more accurately described as a collection of phished and hacked credentials collected over years. In fact, many of the accounts have long been suspended or are matched with very old passwords.
The database of usernames and passwords, which was first reported by CNews, was posted on Tuesday evening to btcsec.com, a Russian-language Bitcoin security forum. The publisher, named tvskit, posted the following screenshot of the database, claiming that over 60 percent of the passwords were valid and working:
The file contains information on English-, Russian-, and Spanish-speaking users of Google services, such as Gmail and Google Plus. In addition to Google, the leak includes thousands of user credentials for Yandex, the largest search engine in Russia.
Google and Yandex representatives told CNews that while the credentials were stolen through years of phishing and hacking against individuals, their own systems were never compromised.
Russia’s Bitcoin Security forum has been the scene of several major leaks over the past several days. On Tuesday, 4.66 million Mail.ru accounts were exposed. Monday, usernames and passwords from 1.26 million other Yandex accounts were published in a text file.
If you want to find out if your account is included in the leak, you can head to https://isleaked.com/en.php and input your address.
H/T Russia Today | Illustration by Jason Reed
Patrick Howell O'Neill is a notable cybersecurity reporter whose work has focused on the dark net, national security, and law enforcement. A former senior writer at the Daily Dot, O'Neill joined CyberScoop in October 2016. I am a cybersecurity journalist at CyberScoop. I cover the security industry, national security and law enforcement.