Police in Gujarat, India, to question Google after uncovering 500K+ Gmail IDs and passwords used to send hoax bomb threats to government offices since 2022 (Munsif Vengattil/Reuters)

Indian authorities uncovered a criminal network that used more than 500,000 Gmail IDs and passwords to send hoax bomb threats to government offices since 2022, and are now questioning Google over whether stronger account safeguards could have reduced abuse. For CIOs and technology leaders, the case underscores that large-scale account compromise and identity misuse can create real operational disruption, reputational damage, and security workload—even when the attack vector is basic credential abuse rather than advanced exploitation. It also reinforces the strategic need for stronger identity controls, anomaly detection, and rapid incident response processes across IT environments, especially for organizations that rely heavily on cloud email and collaboration platforms.