Almost five million password combinations were published, however a Google spokesman said there was “no evidence” that its systems had been hacked. Instead, experts believe the passwords are either old ones obtained through phishing attacks on users, or passwords used on other sites in conjunction with Gmail addresses.