5 million Gmail usernames, passwords posted on Russian forum2014-09-11 09:35 by Daniela
Tags: Gmail, security
A list of almost 5 million combinations of Gmail addresses and passwords was posted online on Tuesday. It is still unclear how anyone obtained the vast collection of usernames and passwords. Google says its servers were not breached. The list appears to be a collection of passwords exposed in previous hacks - likely on users' own computers, not Google's systems. The passwords not only give access to Gmail, but other Google services such as Drive and the mobile payment system Google Wallet.
"Our analysis reveals that there is substantial evidence that this data is up to three years old and primarily [linked to the] geographical catchment area [of] the United States and England, but [we've] also confirmed [a] dozen Danish Gmail accounts," CSIS, a Danish security company that provides cybercrime intelligence to financial institutions and law enforcement reports. "We base this on an overall correlation with other data leaks we've seen in recent years."
"We can't confirm that it is indeed as much as 60 percent, but a great amount of the leaked data is legitimate," said Peter Kruse, the chief technology officer of CSIS Security Group.
The purported Gmail leak comes days after a similar leak of login data for millions of email accounts held with Russian webmail service mail.ru. CSIS reckon both leaks come from the same source.
Read more -here-