A massive data leak has exposed over 183 million passwords, with Gmail, Outlook, and Yahoo users among those affected, according to cybersecurity expert Troy Hunt, who disclosed the breach on his Have I Been Pwned website.
Warning to people in South Africa who use Gmail
— MyBroadband (@mybroadband) October 27, 2025
Have I Been Pwned analysed "threat data" from Synthient, which contained the data of 183 million email users, including addresses and passwords linked to many Gmail accounts.https://t.co/fUPuUCEDrP
The stolen data — totaling 3.5 terabytes — includes email addresses, associated websites, and passwords collected through “stealer logs,” malware-generated files that capture login credentials from infected devices. Hunt described the breach as a compilation of numerous smaller leaks, not a single incident.
183 million Gmail passwords stolen, just a preview of the nightmare ahead. Digital ID breaches will be far worse: every bit of your life, biometrics, identity, financials, all exposed in one catastrophic leak. Are you ready for that nightmare? pic.twitter.com/Ke4Kk6hvQs
— Ray Vahey (@rayvahey) October 27, 2025
Cybersecurity researcher Benjamin Brundage uncovered the compromised data and warned that millions may be affected without realizing it. Experts urge users to immediately change passwords, enable two-factor authentication, and avoid reusing credentials across accounts.
Google confirmed the issue was part of ongoing malware activity, not a new Gmail-specific hack, emphasizing its layered protections and urging users to adopt passkeys for stronger security.
Also read:

