5 million ‘compromised’ Google accounts leaked

[avi]

Late tuesday on a russian security forum, list of compromised Google Account Credentials have been leaked. Though forum has purged all the passwords, the file contains user logins.

Russian security forum link - https://forum.btcsec.com/index.php?/topic/9426-gmail-meniai-parol/
Database dump mirror (it's a .txt file) (34MB) - https://mega.co.nz/#!b5lREBgS!LnC9yfR3RC--iMeNMWdQP7m1j4nUf9RTmI_RhAUjzD4

 

[ivhere]

Holy shit! My primary Email address is on the list. But I am using two step authentication since long time so no worries for me at least.

 

[Blackend]

Jeez I found my primary email on it too :/

 

[avi]

Two of my dump emails are present in that list, but not my primary email, so that keeps me going ;-)

 

[nishthecooldude]

Thanks for sharing bro...i have read that some people are saying online on forums that their passwords were old...if anyone has password txt file then he/she can confirm if their email was hacked and how old is the password....

 

[paarkhi]

None of my email IDs are in the file

 

[Blackend]

Thanks for sharing bro...i have read that some people are saying online on forums that their passwords were old...if anyone has password txt file then he/she can confirm if their email was hacked and how old is the password....

You can use this site to check - https://isleaked.com/en.php

It shows you the first 2 characters of the leaked password. I checked it against my primary e-mail that was found and the password was ages old, easily more then 6 years.

 

[Spacescreamer]

^ Anybody who's email was on the dreaded list checked on this link: https://isleaked.com/en.php ??
Wanted to know how much accurate/reliable is the above mentioned link.

Secondly, any mirror for the database dump in the opening post? or any site mentioning the list? unable to access that darned mega site.

 

[Being.smart]

can anyone check my following email id : lallavipin,

 

[Soyab0007]

5 million I thought google was secure

 

[Criminal]

@Being.smart not there in the mega list.

 

[avi]

^ Anybody who's email was on the dreaded list checked on this link: https://isleaked.com/en.php ??
Wanted to know how much accurate/reliable is the above mentioned link.

Secondly, any mirror for the database dump in the opening post? or any site mentioning the list? unable to access that darned mega site.

The download link in OP is only 35MB and is txt, its not sql.

So download and do ctrl + f

 

[Soyab0007]

The download link in OP is only 35MB and is txt, its not sql.

So download and do ctrl + f

File taking too long time to open
can anyone check my id soyab07

 

[paarkhi]

Secondly, any mirror for the database dump in the opening post? or any site mentioning the list? unable to access that darned mega site.

Mega needs to be accessed with TOR Browser, banned otherwise in India

 

[Mechanic]

mega.co.nz is blocked from my BSNL connection

 

[Blackend]

File taking too long time to open
can anyone check my id soyab07

Use Notepad++ to open it. It opens in a second.

 

[TEUser2K1]

Mine not there, when checked through https://isleaked.com/en.php

Now, let me hope this service will not abuse my email-id.

 

[ivhere]

mega.co.nz is blocked from my BSNL connection

Working fine for me, Try with google dns.

 

[Crazy_Eddy]

Is this a recent hack or remnants of the heartbleed security hole?

Edit:
A Google spokesman told Mashable that the company has "no evidence that our systems have been compromised," and security experts seem to agree that the passwords are either old Gmail passwords obtained through phishing, or are passwords that were actually used on other sites.

 

[aka911]

Found my email in the list but with old password.... Still a frightening experience