from Hacker News

4M gmail addresses with passwords leaked (large html file, 150megs)

by mr_november on 11/29/16, 12:20 AM with 24 comments

  • by nilved on 11/29/16, 12:37 AM

    This is from 2014 and likely not a Google hack or leak but a subset of credentials revealed by hacks or leaks from other sites.

    https://productforums.google.com/forum/#!topic/gmail/4q3AYMi... and https://facepunch.com/showthread.php?t=1423764 refer to this link.

    Edit to add: https://haveibeenpwned.com/PwnedWebsites#BTSec

  • by buckbova on 11/29/16, 12:33 AM

    Caution, this is a link to the actual emails.

  • by coldcode on 11/29/16, 1:14 AM

    I looked at the paste file. It had my gmail address (which is mostly what I use for public stuff) but the password came from only one place: travel.travelocity.com; however that user database is long gone as Travelocity is now just a brand of Expedia so that old account no longer exists. Of course I don't reuse passwords so it's not an issue. I wonder how it got there.

  • by disposablename on 11/29/16, 12:41 AM

    Probably passwords from other sites, not gmail. Lists my email next to a password I've never used on gmail, or any other important site.

  • by Flammy on 11/29/16, 12:35 AM

    I give this dump 12 more minutes until someone at Google uploads it to an internal tool to invalidate all of the emails listed.

  • by rasz_pl on 11/29/16, 1:57 AM

    fake, checked 3 gmails. not only are the passwords wrong, they are random garbage that was never used with those accounts

  • by kafkaesq on 11/29/16, 12:34 AM

    Fascinating. Any thoughts as to how this came about?

  • by Sephr on 11/29/16, 12:36 AM

    Mirror?

  • by fiatjaf on 11/29/16, 12:35 AM

    Can anyone see if my name is in there?