4 ms·

Gmail stores the last IP that accessed your account - it's shown at the bottom of your inbox: Last account activity: 14 minutes ago at X.X.X.X My guess is the

• lutorm 17y ago
  Yes but how do they get the other IP addresses that had been accessed without having that traffic go through Google?
  • mcobrien 17y ago
    Sorry, I could have made my original comment clearer. I don't think there were any other IP addresses accessed. The "other industries" that were involved were using Google Apps, so Google has access to those records. That's why they have to inform the other companies their security was breached: the traffic did go through Google so they're the only ones who know about it.
  • roc 17y ago
    That's the six hundred million dollar question in my mind. How exactly did Google know that those other institutions were under attack? Unless the attack resulted in rooted Google machines that then attacked outward, or all those institutions were running on Google Apps. Major institutions running on Google Apps seems unlikely (Are any major institutions outside of academia running Google Apps hosted by Google?). And attacking outward from a rooted box inside Google's network seems careless, unless the attackers were leveraging some dedicated pathways that made their job easier. Which suggests the breach was far more serious than indicated.
    • lt 17y ago
      Google's security team eventually managed to gain access to a server that was used to control the hacked systems, and discovered that it was not the only company to be hit. http://news.ycombinator.com/item?id=1050300 http://news.ycombinator.com/item?id=1050300