Apparently five million passwords were hacked from a Russian site called Bitcoin Security with people from the UK, Spain and Russia.
It’s not entirely clear what all those passwords were doing on the Russian site in the first place.
Google said it was advising folk to set up two step verification on their accounts.
A representative said Google had no evidence that its own servers had been compromised.
The passwords relate not only to Gmail but other Google services.