More than 2.5 billion Gmail users may be exposed to increased scam and takeover risk after a large-scale data theft tied to Salesforce integrations, according to multiple industry reports. That access reportedly allowed the theft of names, contact details, business affiliations and notes, rather than account passwords. Third-party dark-web monitoring tools can show whether your email or business contact details appear in known dumps. Audit OAuth apps connected to critical business tools and remove any you don’t recognize. Google and security vendors continue to track shifting cluster identifiers and TTPs (tactics, techniques, and procedures).