Hi everyone, 6 days ago my #Google account was hijacked. 2FA was bypassed, #recovery options were #replaced, my devices were reset remotely, and I was #locked #out of my own #identity.

I did what every responsible person is told to do: I followed the #official #recovery steps, documented everything, escalated properly, and filed reports through formal channels. I contacted local #authorities, opened a complaint with the #AEPD, notified the #EDPB and the #FTC, and even submitted a report to the #FBI. I also contacted consumer protection networks

And yet #Google’s “support” ends exactly where the danger begins.

#Google only reacted after my LinkedIn post crossed 50,000+ impressions. Not because I followed the official path. Not because the evidence was strong. Not because #IDENTITY #THEFT IS #URGENT, but because it became #visible.

“If recovery fails, create a new account. There is no further step. We cannot authenticate you manually”, they said.

A company relied on by billions is effectively saying:
If a #criminal takes your #identity inside #Google’s ecosystem, Google won’t verify you as the #owner - the #criminal keeps #control, and #YOU “#start #over.”

In other words:
i/ A #criminal can #keep #access to your emails, files, contacts, backups, private documents, and identity signals.
ii/ The #legitimate #owner is told to “#start again” while the #attacker #remains inside

That design creates a #brutal #incentive: #attackers get #continuity; #victims get automation. It enables #impersonation and #criminal misuse of my #identity, exposing me to #serious #legal and #financial #risk

Under #GDPR, #personal #data is a #protected #right. #Users must be able to #access and #recover their #own #data, and #platforms must #implement appropriate #technical and #organisational #measures to safeguard #availability and #integrity

When a #company #refuses #human verification in #high-risk #identity #theft cases, it actively increases harm

I’ve published a Change.org petition to demand #human #recovery + #emergency freezes for hijacked accounts.

If you’ve experienced something similar, please #comment.

A single user is easy to ignore; a critical mass isn’t.

#Add your #voice. #Comment your #experience. #Share this petition.

Google Google Workspace Google Cloud Security

Agencia Española de Protección de Datos - AEPD European Data Protection Board Court of Justice of the European Union Federal Trade Commission FBI Cyber Division

The New York Times The Washington Post The Wall Street Journal Bloomberg CNN The Associated Press NBC News ABC News CBS News NPR Euronews Le Monde La Repubblica

BBC News The Guardian The Times and Sunday Times The Telegraph The Economist Sky News

Reuters WIRED The Verge TechCrunch Financial Times

El Pais El Confidencial elDiario.es La Vanguardia Radiotelevisión Española Europapress

#IdentityTheft #CyberSecurity #GDPR #DigitalRights #AccountRecovery #BigTech #Accountability

LINK: https://lnkd.in/djU9xw-X

Think.Write.Gather.

Think.
Write.
Gather.