When your Google Workspace account is compromised, the impact can be devastating — from leaked company data to loss of trust with clients. Cybercriminals don’t just stop at your email inbox; once inside, they can access shared drives, calendars, and sensitive business files.
If you suspect that your Google Workspace account has been hacked, here are the exact steps you need to take to secure it quickly.
Step 1: Confirm the Breach
Look out for red flags such as:
- Emails sent from your account that you didn’t write.
- Login notifications from strange devices or locations.
- Changed security settings you didn’t authorise.
Step 2: Secure Access Immediately
- Go to myaccount.google.com.
- Select Security → Password and change it to a strong, unique one.
- On the same page, select Manage all devices and Sign out of anything you don’t recognise.
https://myaccount.google.com/security-checkup
Step 3: Enable 2-Step Verification
This is the single best defence against future hacks.
- In your Google Account → Security → 2-Step Verification.
- Add your phone, Google Authenticator, or security key.
Step 4: Check Account Activity
Review recent logins:
- Go to Security → Recent security events.
- Look for unfamiliar devices or suspicious locations.
Step 5: Audit Third-Party Acces
Hackers often grant shady apps access to your account.
- Go to Security → Third-party apps with account access.
- Remove anything you don’t recognise.
Step 6: Review Email Rules and Recovery Options
Attackers may create hidden rules to forward or delete emails.
- Open Gmail Settings → Filters and blocked addresses.
- Delete anything suspicious.
- Check Forwarding and POP/IMAP for auto-forwarding rules.
- Under Security, verify recovery email and phone number.
https://mail.google.com/mail/u/0/#settings/filters
Step 7: Notify Your Team and Admin
If you’re part of a business, let your Google Workspace administrator know. They can:
- Force password resets for accounts.
- Lock out suspicious sessions.
- Review audit logs across the domain.
Step 8: Restore Data if Needed
If files or emails are missing, don’t panic.
- Use Google Vault (if your organisation has it) to recover lost emails.
- Admins can also restore files in Google Drive up to 25 days after deletion.
- For long-term safety, keep regular backups outside Workspace.
How CK Computer Solutions Can Help
Recovering from a hacked Google Workspace account is stressful, especially if sensitive client data is involved. At CK Computer Solutions – Managed IT Services Dublin, we help businesses secure, restore, and protect their Google Workspace environments.
We can:
- Proactively monitor account activity for suspicious behaviour.
- Set up multi-factor authentication and security best practices.
- Integrate email security solutions to block phishing attacks before they land in inboxes.
- Provide reliable off-site backups so no data is ever truly lost.
With CK as your IT partner, you don’t just recover from an attack — you build stronger defences against the next one.