Imagine moving across country, unpacking a tractor trailer truck for three days, sitting down on Monday morning to finally go through a week's worth of email, and you can't log in.
I wondered if I had forgotten my password over the week, so I tried several. It didn't take long before Gmail started requiring me to confirm my log in attempts by typing the letters they showed on the screen. No luck. I tried to have my password emailed to my secondary address, but I never received anything from Google.
Very late on Monday afternoon, after trying password after password, checking and rechecking my other email addresses (I have like 10 email addresses), I finally tried to log in to one of the websites I administer. Using my FTP program, I tried logging on, but the program said the password was incorrect.
My websites all looked fine, but I knew it was trouble when I couldn't log into either my email or my websites. I got on the horn to my webhost (Psek) to see if they could tell me why I couldn't log in. That's when I found out all hell had broken loose.
Someone had searched my Gmail and found the passwords to a few of my sites and had replaced the content of the sites with a "You've been hacked" page. I never knew this had happened because one of my clients had alerted Psek of the problem and Psek had already recovered all my sites and changed the passwords. After getting my new passwords, I was able to access my websites again, but I still couldn't get into Gmail which contained over 7,000 emails...a ton of information that was pretty vital to me.
I sent a few emails to Gmail's support, but since I didn't have the original email that invited me to join Gmail, my hopes were grim. After reading a few forum posts about other people who had their Gmail hacked, I was not hopeful I was going to ever see my account again. Most frustrating was not being able to speak to a person at Google, and my emails to support were not even acknowledged with an auto-reply that others had reported receiving.
A couple of days later I pulled out my old computer and fired up my email looking for the original invitation email to join Gmail. To my complete shock, I found it from over two years ago and I was able to send another email to Gmail support with more complete information.
The next day, after searching for solutions, coming up empty, and still not hearing anything from Google, I called Vermont's Attorney General's office. I live in Wisconsin now, but I've found Vermont's office to be helpful in the past and technically, the first evidence the email was hacked was while I was in Vermont. They couldn't give me any help with putting me in touch with someone from Google, but they did refer me to a website where I could submit a form pertaining to identity theft. The site was the IC3, a partnership between the FBI and the National White Collar Crime Center.
I submitted the form from the IC3 around 10 am, and at 2:03 in the afternoon, my Gmail restored my account and returned my access to all my emails. I have no idea if the updated email to support, or the IC3 form had anything to do with Gmail suddenly responding, but they probably didn't hurt. Here's the timeline:
- July 4, afternoon Last time I checked my Gmail before the big move to Wisconsin.
- July 4 My Gmail account was hijacked.
- July 4 At least two of the websites I administer had the home page replaced with a "You've been hacked" page.
- July 5 All websites back to normal.
- July 10 I checked my Gmail and was unable to log on to my account. I was also unable to access several websites I administer. My webhost provided me with the updated passwords later in the day. At least two emails were sent to Gmail support.
- July 12 I located the original Gmail invitation email on my old computer and sent Gmail support updated information.
- July 13 I called the Vermont Attorney General and they suggested filling out a form at IC3. I filled out the form and about 4 hours later, Gmail support sent me their first email regarding the hijacking. This email gave me my account back.
I hope this helps anyone else that runs into this problem as I didn't find very many sites where people have run into this. It appears that the hacker stole my Gmail password somehow. I have no idea who it was, or how they did it, but it could have been as unsophisticated as standing over my shoulder and watching me type it (though I doubt it). To say the least, my passwords are much more complex now and I have a printed copy of my original Gmail invite for my files. Hopefully this has not happened to you, and if so, you have my sympathy and support to get your email back.
Tags: gmail, gmail hacked, gmail hijacked, ic3, internet fraud, identity theft, gmail password, gmail password stolen, gmail login, gmail login problem, gmail hack, gmail broken into, locked out of gmail, gmail support, psek, vermont attorney general, vermont consumer protection
Follow me on Twitter by clicking here.