Gmail Password Stolen, Like For Real?

riboflav

Member
SoSH Member
Jan 20, 2006
9,709
NOVA
Today, I received an email from google that someone has my password (literally says that) and used it to try to login to my account. Google supposedly blocked their attempt as they said it came from an unknown device and the ip address showed NY (I live in VA).

I find this hard to believe because I just switched my password as I do every couple months but I've never received an email like this so it has me a little freaked out.

When I google the ip address it comes up not as NY but as Kansas, Sprint wifi. Google claims the attempt came at 12:15pm. Which just happens to be about the time that I was checking my gmail on my android on Target's wifi in VA. This is something, btw, I never do. I always use mobile data when accessing my email but I'm not sure if that has anything to do with it.

When I check the details on gmail account for the last 10 places I've accessed my account, they have me in Maryland a lot (on my normal device) but I'm never there. So, I'm wondering how accurate all this is?

P.S. I changed my password again and have moved to a two-step verification process.

P.s.s. I'm a tech novice. Appreciate any help.
 

Lowrielicious

Member
SoSH Member
Apr 19, 2011
4,328
More than likely this is a false positive and it was your login attempt on the the Target wifi. The outbound IP address of targets wifi was different enough from your usual locations that it flagged with google. Particularly likely as you say you only usually use it in a very specific set of networks/locations.
I have had this come up before when logging in to gmail from corporate networks that have connections out to the internet from international locations.

Unless you get any more of these I wouldn't worry any more about it.