Indiareviled

Published on August 30, 2025

In an important security advisory, Google has informed its estimated 2.5 billion Gmail and Google Cloud users to update their passwords and improve account security after a data breach involving a third-party Salesforce system. Although the breach did not expose sensitive customer information like passwords or personal emails, it has led to an increase in phishing and social engineering attacks by the infamous cybercrime group “ShinyHunters.” Here’s what you need to know to protect your account.

The Salesforce Breach: What Happened?

In June 2025, Google’s Threat Intelligence Group found a breach in its corporate Salesforce account. This breach was linked to a group of threat actors known as UNC6040, also called “ShinyHunters.” The attackers used clever social engineering methods. They impersonated IT support staff through phone calls, emails, and texts. This tricked Google employees into approving harmful applications or giving access to sensitive information. The breach exposed a limited set of business data, including company names, contact details, and sales notes. Google pointed out that this information was mostly publicly accessible and did not include personal Gmail or Google Cloud account data.

By August 8, 2025, Google alerted affected users through email. On August 27, it broadened its warning to all users as phishing attempts increased. Some reports mistakenly connected this event with separate credential leaks, such as a huge exposure of 16 billion records in June 2025 across various platforms, including Google. The Salesforce breach did not involve stolen passwords, but it increased risks by giving hackers data to support targeted scams.

Who Are ShinyHunters?

Active since 2020, ShinyHunters is a well-known cybercrime group. They have carried out notable breaches against companies like AT&T, Microsoft, Santander, Ticketmaster, Adidas, Cisco, LVMH, and Allianz. Their methods often depend on social engineering instead of technical tricks, which makes them skilled at exploiting human trust. In this instance, they used stolen Salesforce data to launch aggressive phishing campaigns. They plan to increase extortion efforts through a possible data leak site. Google has confirmed successful intrusions due to compromised credentials, but consumer products have not been affected.

Why This Matters to You

While the Salesforce breach did not directly expose Gmail passwords, the stolen business data has allowed ShinyHunters to create convincing phishing emails, spoofed calls, and texts that urge users to verify their accounts. These attacks aim to steal login details, take over accounts, or extort users, sometimes demanding bitcoin payments. Additionally, unrelated credential leaks on the dark web increase the risk of account compromise, especially for users who reuse passwords or do not update them regularly.

Google points out that while many users have strong, unique passwords, only about one-third of them update these passwords regularly. This weakness, combined with the rise in social engineering, highlights the need for stronger security measures. The company is also promoting password less options like passkeys, which use biometrics for better protection.

How to Secure Your Gmail Account

Google has outlined several steps to protect your account from these threats:

Update Your Password: Choose a strong and unique password. Change it right away if you think it has been compromised.
Enable Two-Factor Authentication (2FA): Use app-based 2FA, like Google Authenticator, instead of SMS to reduce SIM-swapping risks.
Monitor Account Activity: Regularly check your Google Account security page for any unfamiliar logins or devices.
Stay Vigilant: Do not respond to unsolicited calls, emails, or texts that claim to be from Google. The company rarely contacts users directly for support. Always verify alerts through official channels.
Explore Passkeys: Think about using biometric-linked passkeys instead of traditional passwords.

Step-by-Step Guide to Changing Your Gmail Password

Device/Method	Steps
Browser	1. Navigate to your Google Account. 2. Click “Security” in the left sidebar. 3. Under “Signing in to Google,” select “Password.” 4. Sign in and enter a new password. 5. Click “Change password.”
Android	1. Go to Settings > Google > Manage your Google Account. 2. Select “Security.” 3. Under “Signing in to Google,” choose “Password.” 4. Sign in and enter a new password. 5. Tap “Change password.”
iOS (Gmail App)	1. Tap your profile picture > Manage your Google Account > Personal info. 2. In Profile, choose “Password.” 3. Sign in and enter a new password. 4. Tap “Change password.”

For extra peace of mind, use services like Have I Been Pawned to check if your email or passwords have shown up in known breaches.

The Bigger Picture

This incident shows how cyber threats are changing, with human error often being the weakest link. Google’s quick response and clear communication demonstrate a focus on user safety, but personal awareness is essential. By following the suggested security measures and keeping updated, users can greatly lower their chances of falling for phishing scams or account takeovers.

For updates, check Google’s official security blog or reliable cybersecurity sources. Stay alert, and protect your accounts!

Sources: Economic Times, Google Threat Intelligence Group, cybersecurity reports from Bleeping Computer, TechRadar, and Forbes.

Introduction

Recent claims of electoral fraud have sparked intense debate in India. Congress leader Rahul Gandhi has accused the Bharatiya Janata Party (BJP) of organizing “vote chori” (vote theft) during the 2024 Lok Sabha elections. Gandhi alleges that there is widespread manipulation in several constituencies, especially in Maharashtra. He has vowed to reveal what he describes as the “Gujarat model” of electoral theft within six months. These accusations have faced strong pushback from the Election Commission of India (ECI) and BJP supporters, who argue that the claims lack credible evidence and are politically driven. This blog looks into the allegations, the responses, and the wider implications for India’s democratic process.

Rahul Gandhi’s Allegations

On August 7, 2025, Rahul Gandhi, the Leader of Opposition in the Lok Sabha, held a press conference in Delhi. He presented what he called evidence of electoral fraud in the 2024 Lok Sabha elections. Focusing on the Mahadevapura Assembly segment in Bangalore Central, Karnataka, Gandhi claimed that over 1 lakh votes were manipulated. He cited issues such as duplicate voters, fake addresses, bulk voter registrations at single addresses, invalid photos, and misuse of Form 6 for new voter registrations. He suggested that similar problems appeared in 48 constituencies across India, which might have affected the election outcome. Gandhi also alleged that in Maharashtra, 1 crore new voters were added between the Lok Sabha and state assembly elections. He connected this claim to the BJP’s electoral success. He criticized the Election Commission of India for deleting polling booth videography footage after 45 days. He argued that this practice limits transparency and demanded machine-readable voter lists for public audits.

Gandhi’s campaign includes the launch of the “Voter Adhikar Yatra” in Bihar and a dedicated website, votechori.in. Its goal is to gather public support against claims of voter suppression and manipulation. He has warned that the ECI’s Special Intensive Revision (SIR) in Bihar, which updated voter rolls from June to July 2025, might disenfranchise vulnerable groups such as migrants and minorities because of its hurried implementation. Gandhi has promised to deliver clear evidence of widespread fraud within six months, positioning it as a struggle to defend India’s democratic values.

The Election Commission’s Response

The ECI has strongly denied Gandhi’s claims, calling them false and misleading and an attack on the integrity of India’s electoral process. Chief Election Commissioner Gyanesh Kumar pointed out that the ECI works transparently. More than 1 crore officials and 20 lakh polling agents participate in Lok Sabha elections, making widespread fraud unlikely. The ECI has asked Gandhi to submit a signed affidavit under the Registration of Electors Rules, 1960, including specific details of the alleged irregularities, like the names of duplicate voters. The commission also stated that it keeps CCTV footage for only 45 days after the election, following legal requirements for dispute filings. Furthermore, the electoral rolls are publicly available for review by all parties, including Congress, before elections.

In response to specific claims, the ECI looked into cases such as that of Shakun Rani. Gandhi claimed she voted twice in Mahadevapura. However, the commission reported that Rani confirmed she only voted once, which undermines the claim. The Chief Electoral Officers of Karnataka and Maharashtra have also sent notices to Gandhi. They are asking for documented proof to back up his accusations or a formal apology. The ECI argued that phrases like “vote chori” disrespect the Constitution and the millions of voters and poll workers involved in elections

Counterarguments and Political Rebuttals

Critics of Gandhi’s claims, including BJP leaders and commentators, argue that the allegations are politically motivated and lack solid evidence. BJP leaders like Amit Malviya and Gaurav Bhatia have accused Gandhi of damaging constitutional institutions to distract from Congress’s electoral losses. They highlight that Congress had access to the 2024 Karnataka electoral rolls during revisions but did not raise formal objections then. Malviya has also asked Gandhi to provide clear proof instead of using unverified data.

A significant issue is the data cited by Gandhi. For example, Sanjay Kumar from the Centre for the Study of Developing Societies (CSDS) initially backed claims of voter irregularities in Maharashtra, suggesting a 45% increase in voters in some areas. However, Kumar later withdrew this statement, apologizing for a data mistake. BJP leaders used this retraction to challenge the credibility of Gandhi’s overall campaign. Critics argue that isolated cases, such as duplicate voters or invalid addresses, are common in large electoral rolls and do not necessarily point to widespread fraud that favors one party. They also point out that updating voter rolls, like the SIR in Bihar, is a normal practice to remove deceased or duplicate voters, although the speed of this process has raised concerns about potential errors.

Commentators have also criticized Congress for selective outrage. They highlight past claims of electoral manipulation by the party during its time in power. These critics say Gandhi’s focus on fraud in constituencies where Congress lost weakens his credibility. It implies a story driven by electoral losses rather than solid evidence of deeper problems.

The Maharashtra Voter Increase Debate

Gandhi’s claim of a 1 crore increase in voters in Maharashtra between the Lok Sabha and assembly elections has sparked controversy. The ECI and BJP have responded by saying that the actual net increase was much lower. They attribute this to regular updates and new voter registrations, which commonly happen between elections. To provide some context, Maharashtra has over 9 crore voters. Changes of a few lakhs are normal, especially considering the state’s population growth and voter outreach efforts. The ECI has pointed out that voter lists are updated with input from all parties. There is also no evidence to support the claim that new voters favored the BJP more than others.

Implications for Indian Democracy

The rising conflict between Gandhi, the ECI, and the BJP shows a growing lack of trust in India’s election institutions. A Lokniti-CSDS survey from 2025 revealed a sharp drop in public confidence in the ECI. Distrust rose from 11% to 31% in Uttar Pradesh between 2019 and 2025. This decline, along with allegations from the opposition, highlights the need for more transparency in the electoral process. Suggestions include making voter lists machine-readable and keeping CCTV footage for longer periods. However, experts like former Chief Election Commissioner N Gopalaswami point out that large-scale changes to voter rolls, such as those in Karnataka in 2008, often lead to many additions or deletions without proving any fraud.

While Gandhi’s claims have energized opposition support, they may deepen the divide in the discussion. The ECI’s demand for affidavits and the BJP’s rejection of the claims as “political theatre” indicate a deadlock, with neither side truly responding to the other’s concerns. The judiciary could be important here, as Gandhi has asked for its participation, and a Supreme Court appeal about Bihar’s SIR is already being examined.

Conclusion

The “vote chori” controversy shows significant political divisions and raises valid questions about electoral integrity, even if evidence of widespread fraud is unclear. Gandhi’s campaign has highlighted issues with voter rolls, but without solid data, it may be seen as mere talk. The Election Commission of India needs to handle these concerns openly to rebuild public trust. At the same time, opposition parties should not label every defeat as fraud, as this could damage their credibility. With important state elections approaching, like those in Bihar, the focus should be on improving electoral processes to ensure the principle of “one person, one vote” remains protected.