According to cybersecurity expert Troy Hunt (the genius behind Have I Been Pwned), over 183 million unique email and password combos just surfaced online. Out of these, around 16 million are brand new leaks — meaning they haven’t been seen in any previous breaches.

But here’s the twist: this wasn’t a direct Gmail breach. Google wasn’t “hacked” in the traditional sense. Instead, these leaked credentials came from third-party sites, malware infections, and those old “sign in with your email” forms we barely remember using. Of course, the danger is real. If you’re someone who uses one password for multiple accounts (don’t lie, we’ve all done it), this leak could give hackers an easy backdoor into your inbox, social media, or even your online banking. ” Still, they’re encouraging users to reset old passwords, enable two-factor authentication (2FA), and switch to passkeys — which are way more secure than traditional passwords. If you are, don’t panic — just act fast.

At the end of the day, this leak isn’t a reason to freak out it’s a reminder to level up your digital hygiene.