A highly respected veteran security researcher has confirmed that a database of 149 million compromised credentials, including those for an estimated 48 million Gmail accounts, has been leaked online.

A database containing 149 million compromised credentials, including 48 million Gmail accounts, has been leaked online. The database, which was not password-protected or encrypted, has been taken down but not before it was analyzed by cybersecurity experts. The leaked data, likely a compilation of past breaches and infostealer logs, poses significant risks to users, including potential credential stuffing attacks. Google has confirmed that they are aware of the issue and have automated protections in place to lock accounts and force password resets when exposed credentials are identified.