Plain-text passwords and account names linked to five million Gmail accounts have been leaked onto several Russian forums. Security experts had already confirmed the data seemed legit, albeit approximately three years old, before Google put up its blog post on the subject.
The leak, to a variety of forums, not all of which are cybercrime related, likely originates from various sources, Peter Kruse, a partner and eCrime specialist at CSIS Security Group told El Reg.

The link for this article located at The Register UK is no longer available.