Overview

• Google says it detected a significant number of successful account intrusions and issued a mass alert urging stronger credentials and security checks.
• The compromise traces to a June intrusion into a Salesforce-hosted database used for contacts and customer management linked to Google.
• Exposed records involved business and contact details rather than passwords or highly sensitive personal data, according to the company.
• Attackers have used phishing and social engineering, including fake login pages and support personas, to harvest credentials and even two-factor codes.
• Google warned the ShinyHunters group could escalate extortion efforts with a potential data-leak site, and said affected users were notified on August 8.