Attackers Bypassed Google’s Email Verification to Create Workspace Accounts, Access Third-Party Services

The issue, which began in late June, affected a few thousand Workspace accounts that were created without domain verification. Google has since fixed the problem and added more security measures to prevent similar bypasses in the future.