According to the Daily Dot, nearly 5 million usernames and passwords have been leaked on a Russian Bitcoin forum. Here's what you should know.
The list has since been taken down, and there's no evidence that Gmail itself was hacked — just that these passwords from accounts associated with Gmail have been leaked. Most sources are saying that lots of the information is quite old, so chances are they were leaked long ago — though others are claiming 60% of the passwords are still valid (not to mention really, really horrible).
To check if your password was one of the leaked, plug your Gmail address into this tool (which also checks against recent Yandex and Mail.ru leaks). The tool is rather swamped right now, so it may be difficult to access. If you'd rather not give your email address to a tool you don't trust, you can alternatively change all of your passwords right now.
We still don't know the full details, but the lesson remains the same: use secure passwords and enable two-factor authentication on all of your accounts!
5 Million Gmail Passwords Leaked to Russian Bitcoin Forum [The Daily Dot]