Breachesby GlyphDisclosed Oct 8, 2018500,000 affectedConfirmed
Google+ API bug exposed profile data of up to 500,000 users
Google disclosed that a bug in a Google+ People API, patched in March 2018, could have exposed profile fields of up to 500,000 accounts to third-party apps, and announced it would shut down consumer Google+.
What is known
| People affected | 500,000 (as reported by the organization) |
|---|---|
| Disclosed | Oct 8, 2018 |
| Discovered | Mar 2018 |
| Attack | Exposed data |
| Data exposed | NamesEmailsEmploymentOther |
| Sector | Tech · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Google
Gemini accessed three real companies' systems during Irregular security testsAI or model exposed credentials and tokens.AI or modelTechUSUnverifiedSep 16ShinyHunters steal business contact data from Google Salesforce instancePhishing exposed names and phone numbers.PhishingTechUSUnverifiedAug 5, 2025Ex-engineer stole 2,000+ pages of AI supercomputing trade secrets for ChinaInsider exposed internal documents and source code.InsiderTechUSMar 6, 2024Shared Bard conversations were indexed in Google Search resultsExposed data exposed prompts and chats and messages.Exposed dataTechUSUnverifiedSep 27, 2023Second Google+ API bug affected about 52.5 million usersExposed data exposed names, emails and employment records.Exposed data53M affectedTechUSDec 10, 2018Breach, details not statedBreach notice filed with the California AG, details not stated.TechUSMay 6, 2016
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.