Have I Been Pwned Lists 183 Million Stolen Credentials as Google Disputes 'Gmail Breach'

Overview

• Have I Been Pwned has indexed the data for public checks, with security reporting noting an additional 16.4 million accounts identified in the latest update.
• The compilation totals about 3.5 terabytes, including a largest file of 2.6 TB and roughly 23 billion rows of records.
• Credential theft occurred in April 2025 and was compiled and disclosed now after analysis of forums and dark‑web databases.
• Google stated that claims of a Gmail-specific breach are inaccurate, saying the dataset reflects credential theft across the web.
• The exposed records span providers such as Gmail, Outlook and Yahoo, and may include names, birth dates, phone numbers and addresses; users are urged to change passwords, enable 2FA or passkeys, review devices and third‑party app access, and avoid password reuse.