I got an interesting email this morning....

[Naruzeldamaster]

It was (apparently) from Google.
It was telling me that my passwords have been found online.
Thing is, the email wasn't worded like a security breach at all.
Quite literally just an 'official' looking email that opened with 'your passwords have been found online!'
And I'm like ? have they now?
But I don't know, I'm not sure Google would try to 'spook' you by titling the email that way.

 

[hunsickerali]

What is the email address they used? That's usually the biggest indicator.

 

[Naruzeldamaster]

What is the email address they used? That's usually the biggest indicator.

I mean it said google . com, but I said (seemingly) because the address didn't have the usual (no reply) type stuff tied to it. Which usually when you get stuff from the actual place it has that stuff.

Which is what made me suspicious to begin with.

 

[Mad Swede]

It's another so-called fishing attempt, where they send you an official-looking e-mail and try to get you to visit some pagfe or click on a link. If you hold your mouse pointer over the sender's e-mail address or over one of the links you'll see where they really want you to go.

 

[pmmg]

Scam...Google does not send out emails of this type.

A great number of passwords are eventually leaked. If you use the same password in multiple places, chances are, one of them has been leaked, so...your passwords are out there. Where are they? They can likely be found in one of the giant password dumps on the dark web.

The industry has gotten pretty good at keeping passwords secure. They are rarely cracked anymore, just leaked. If its concerning to you, just change your passwords, and set up 2 factor Auth. If not....just ignore the scammers.