Google has been forced to deny Gmail has been hit with a massive security breach in the wake of a flurry of media reports.

Over the last few days, reports have appeared in a number of publications, claiming that the company had issued a new security alert to its 2.5 billion Gmail users.

Several reports said that users should update their passwords following a breach of Google's Salesforce systems, which had allowed hackers to access a database containing Google Cloud and Gmail users’ data.

In a blog post on September 1st, the tech giant has since refuted those claims, insisting that previous issues pose no risk to users.

"We want to reassure our users that Gmail’s protections are strong and effective,” the company said. “Several inaccurate claims surfaced recently that incorrectly stated that we issued a broad warning to all Gmail users about a major Gmail security issue. This is entirely false.”

"While it’s always the case that phishers are looking for ways to infiltrate inboxes, our protections continue to block more than 99.9% of phishing and malware attempts from reaching users."

What’s behind the Gmail hack confusion?

The confusion appears to have originated in an incident reported by Google involving vulnerable Salesloft Drift instances targeted by the UNC6395 threat group.

The company said the hackers had compromised OAuth tokens for Drift Email integration and had used these tokens to access email from a very small number of Google Workspace accounts.

"The only...

Read Full Story: https://news.google.com/rss/articles/CBMi1AFBVV95cUxNVkZPbHd2all6dmk1Q1FNVXdY...