Five million Gmail addresses and passwords appeared on a Russian Bitcoin forum this week. However, Google said its servers were not breached.
The list appears to be a collection of passwords exposed in previous hacks, likely on users' computers. Google said there is no telling if the list is even authentic, but they are warning affected users to take steps to protect their Gmail accounts.
These steps include creating stronger passwords and using two step authentication.
