If you haven’t yet protected your personal accounts amidst recent data breaches, there’s still time to take action.

Google is advising Gmail users to secure their accounts in light of a wave of corporate data attacks that may jeopardize personal safety. In late July and again on Aug. 8, Google informed its 2.5 billion Gmail users about a rise in phishing attempts targeting login information.

Google pinpointed a group named “ShinyHunters,” which has established a data leak site to intimidate users through extortion. The extortion emails utilize domains such as “[email protected]” and “[email protected].”

In May, cybersecurity expert Jeremiah Fowler disclosed that 184 million passwords were exposed in an unprotected database, many associated with email providers like Google. In June, Google’s Threat Intelligence Group (GTIG) indicated a breach in a Salesforce server cluster, revealing business data. This breach was connected to UNC6040, a group using voice phishing to masquerade as IT personnel and siphon money. Recently, GTIG cautioned Salesforce customers about another breach from hacker group “UNC6395.”

To defend against phishing, Google recommends that users activate two-factor authentication and refresh their passwords. Users should refrain from clicking on dubious emails and instead independently confirm security notifications.

How to verify your Google security activity

How to update your Gmail password

How to enable 2-Step verification for Google