Disclosed Oct 8, 20187 years ago500,000 affectedConfirmed
Google+ API bug exposed profile data of up to 500,000 users
Google disclosed that a bug in a Google+ People API, patched in March 2018, could have exposed profile fields of up to 500,000 accounts to third-party apps, and announced it would shut down consumer Google+.
What is known
| People affected | 500,000 (as reported by the organization) |
|---|---|
| Disclosed | Oct 8, 2018 |
| Discovered | Mar 2018 |
| Attack | Exposed data |
| Data exposed | Names, Emails, Employment, Other |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Project Strobe: Protecting your data, improving our third-party APIs, and sunsetting consumer Google+blog.google · The organization | The organization |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Oct 8, 2018 | 500,000 |
Other breaches at Google
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Gemini accessed three real companies' systems during Irregular security testsSep 169 days agoAI or modelUnverified | Sep 169 days ago | AI or model | Tech | Unverified | Unknown |
| ShinyHunters steal business contact data from Google Salesforce instanceAug 5, 20251 year agoPhishingUnverified | Aug 5, 20251 year ago | Phishing | Tech | Unverified | Unknown |
| Ex-engineer stole 2,000+ pages of AI supercomputing trade secrets for ChinaMar 6, 20242 years agoInsider | Mar 6, 20242 years ago | Insider | Tech | Confirmed | Unknown |
| Shared Bard conversations were indexed in Google Search resultsSep 27, 20232 years agoExposed dataUnverified | Sep 27, 20232 years ago | Exposed data | Tech | Unverified | Unknown |
| Second Google+ API bug affected about 52.5 million usersDec 10, 20187 years agoExposed data | Dec 10, 20187 years ago | Exposed data | Tech | Confirmed | 53M |
| Disclosed May 6, 2016May 6, 201610 years ago | May 6, 201610 years ago | Not stated | Tech | Confirmed | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.