Nearly five million Gmail usernames and passwords were leaked on a Russian forum. However, Google has allayed fears saying that less than two percent of the username and password combination actually works.
We found that less than 2% of the username and password combinations might have worked, and our automated anti-hijacking systems would have blocked many of those login attempts, Google said in a blog post. We ve protected the affected accounts and have required those users to reset their passwords.
Google again reiterated that its servers had not been compromised, and the leaked passwords were actually accumulated over years of phishing. You can check if your Gmail account was compromised by visiting isleaked.com and searching for your email address. Additionally, Google has also asked users to opt for two-step authentication process to better protect their Google accounts.