• by Ray Schultz , Columnist, Yesterday

Gmail users are at high risk after a hack exposed 2.5 billion accounts — the whole list. 

The reported attack occurred in June when bad actors gained access to the Google database managed by Salesforce.

This was perpetrated by the group called ShinyHunters, according to Forbes.  

Since then, phishing artists have been contacting Gmail users by phone and by email, pretending to be Google employees. There has been a marked rise in “vishing” — phone and text communications, The Economist reports. 

Intended victims are often told they must reset their passwords. This may be plausible to many since articles now widely state that Gmail passwords are vulnerable. 

But people shouldn’t fall for it. “If you get a message or call from Google, don’t trust it. 9 times out of 10, it’s fake.” Cybersecurity expert James Knight told the Daily Mail.

Sharing login-in information with these cyber criminals will expose users to even more scams. 

It’s possible that businesses are being more targeted than individuals. Indeed, ShinyHunters scammed a Google worker into revealing login details, The Economist reports.  

But people are still being warned to protect themselves. 

Google advises members to use its Security Checkup to identify gaps in protection, and to activate Google’s Advanced Protection Program, according to PC World.

If someone does get through by phone, hang up, report it to your firm’s IT department and above all, don’t give out any information.