Google is probably the most-used search engine in the world. Many of us probably have Gmail accounts, and thanks to SSOs, we’re sure many people use their Google credentials to login or signup for services. Unfortunately, that explains why Google has topped the list for the most exploited in the US.
Google accounts are the most exploited
This data comes courtesy of Click Insight . The platform analyzed search trends from November 2024 up to October 2025, and based on their research, it turns out Google accounts are the most exploited in the US.
This is worrying, but at the same time it doesn’t come as a surprise. Like we said, a Google account plays home to a lot of other Google services. For instance, getting the password to a Google account means you get to access that person’s email account. You also get access to their Google Drive contents, their photos, their calendar events, and their notes.
And like we said, with many of us relying on our Google accounts for SSO, it also means the attacker can access non-Google services as well. Based on these facts, it’s also no surprise that the report found that apart from Google, Meta was the second-most exploited in the US. This is also because Meta has the option to use your Facebook account for SSO. Plus, it also unlocks access to other Meta services like Instagram, for example.
So, what can you do about it?
Unfortunately, the numerous data breaches we’ve seen over the years means that there is a good chance your email and password could be floating about in the internet somewhere. One of the ways to protect yourself is to change your password to something more complex. Don’t go with something familiar. Use password managers to generate something random and complex.
However, passwords can still eventually be breached and guessed. This is where two-factor authentication comes in. It sends a code to your phone or email so that even if someone guessed your password, unless they can access your email or phone, they still can’t login. Lastly, switch to Passkeys if you can.
Passkeys use an authorized device, like your phone, to act as a security measure. Because our phones these days rely on biometric security and encryption, it is way more secure compared to passwords or 2FA.
