breachThe Ransomware Era (2020-Present) Daily Briefing Landmark Event

    Google Salesforce Breach Exposes 2.5 Billion Gmail Accounts

    Sunday, August 24, 2025

    On August 24, 2025, the notorious hacker group ShinyHunters successfully breached a Salesforce database utilized by Google, compromising sensitive information from approximately 2.5 billion Gmail accounts. The attack was executed through sophisticated social engineering tactics, targeting Google employees to obtain their credentials. As a result, the breach has provoked significant concern regarding user security, particularly as it has led to a surge in vishing (voice phishing) attempts directed at affected users. This incident underscores the persistent vulnerabilities organizations face in protecting user data against increasingly sophisticated threat actors. Security teams must act swiftly to mitigate risks, strengthen employee training on social engineering tactics, and enhance their incident response strategies. The incident serves as a stark reminder that user education is paramount in safeguarding sensitive information in today's evolving threat landscape. Capture The Bug

    Sources

    Google ShinyHunters Salesforce data breach social engineering