Google Confirms ShinyHunters Breach Exposing 2.5 Billion Gmail Users

Google has confirmed a massive data breach affecting approximately 2.5 billion Gmail and Google Cloud users, linked to a cyberattack by the hacking group ShinyHunters via vulnerabilities in Salesforce's cloud platform. The attackers used sophisticated social engineering tactics, including impersonating IT support representatives to access OAuth tokens and connected applications, allowing them to bypass core security measures without directly hacking Google's infrastructure. Although much of the stolen data comprises publicly available business information and contact details, ShinyHunters has a history of escalating extortion efforts by threatening to release stolen data or sell it on dark web marketplaces. Google and security experts are urging users to take immediate protective actions such as updating passwords, enabling two-factor authentication, reviewing account recovery details, and remaining vigilant against phishing attempts that have surged following the breach. Google's Threat Intelligence Group warns that ShinyHunters may soon launch a data leak site to increase pressure on victims and expand their extortion tactics. This incident highlights significant vulnerabilities in cloud-based CRM platforms and the risks posed by interconnected third-party applications, affecting not only individual users but also corporate supply chains and customer trust.