# Hacking gmail without being detected?

**URL:** <https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116>\
**Category:** In My Humble Opinion\
**Created:** [July 15, 2014, 12:03am UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116 "2014-07-15T00:03:06Z")\
**Posts on this page:** 12\
**Page:** 2

<div class="post-metadata">

**Author:** ![amorali](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@amorali](https://boards.straightdope.com/u/amorali)\
**Post date:** [July 15, 2014, 11:39pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/21 "2014-07-15T23:39:32Z")

</div>

I’ve already done all of those things. Trust me, its things they could only know through email.

Some of it is things I put in to get them to reveal it. And they did.

---

<div class="post-metadata">

**Author:** ![tellyworth](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tellyworth](https://boards.straightdope.com/u/tellyworth)\
**Post date:** [July 15, 2014, 11:58pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/22 "2014-07-15T23:58:31Z")

</div>

At what point did you change your password? The date should be in the Recent Activity list.

---

<div class="post-metadata">

**Author:** ![amorali](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@amorali](https://boards.straightdope.com/u/amorali)\
**Post date:** [July 20, 2014, 5:32pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/23 "2014-07-20T17:32:12Z")

</div>

So I have some good concrete evidence that they broke into my email, and I’m working with a forensic computer guy who is helping me get more.

I’m wondering what the penalties are for breaking into someone else’s email?

---

<div class="post-metadata">

**Author:** ![Merneith](https://avatars.discourse-cdn.com/v4/letter/m/57b2e6/32.png) [@Merneith](https://boards.straightdope.com/u/Merneith)\
**Post date:** [July 20, 2014, 6:21pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/24 "2014-07-20T18:21:11Z")

</div>

It varies, but it can get pretty severe depending on how the hack was accomplished. You’ll have to ask a lawyer who’s licensed in your state (or the state where you want to file charges.)

---

<div class="post-metadata">

**Author:** ![amorali](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@amorali](https://boards.straightdope.com/u/amorali)\
**Post date:** [July 21, 2014, 7:06pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/25 "2014-07-21T19:06:44Z")

</div>

Does anyone know anything about this company

> **[Internet Defamation - Lawyer & Investigation Team - Litigation Support](https://cyberinvestigationservices.com/internet-defamation2/)**
>
> Internet Defamation Investigation & Attorney Teams. We receive 3,000+ requests for help yearly and have developed unique, cost effective solutions to assist client.

I’m trying to decide what to do.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [July 21, 2014, 8:58pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/26 "2014-07-21T20:58:48Z")

</div>

Did you change passwords and enable 2 step verification?

---

<div class="post-metadata">

**Author:** ![amorali](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@amorali](https://boards.straightdope.com/u/amorali)\
**Post date:** [July 21, 2014, 10:39pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/27 "2014-07-21T22:39:36Z")

</div>

Yes I did.

---

<div class="post-metadata">

**Author:** ![tellyworth](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tellyworth](https://boards.straightdope.com/u/tellyworth)\
**Post date:** [July 21, 2014, 10:41pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/28 "2014-07-21T22:41:47Z")

</div>

At what point did you first do that, after suspecting a problem? The date is in Recent Activity.

---

<div class="post-metadata">

**Author:** ![amorali](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@amorali](https://boards.straightdope.com/u/amorali)\
**Post date:** [July 22, 2014, 4:23pm UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/29 "2014-07-22T16:23:26Z")

</div>

What would I do with that information?

I am going to file a police report. I don’t know if I should file in my city or theirs or both.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [July 23, 2014, 12:02am UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/30 "2014-07-23T00:02:29Z")

</div>

> [@amorali](#):
>
> What would I do with that information?
> 
> I am going to file a police report. I don’t know if I should file in my city or theirs or both.

I believe what he is getting at is was the most recent information relayed to you information that coud only have been recieved by logging into google with the 2 step authenticator. The only way to do that would be with physical access to your computer and the authentication app or things like a cloned phone sim.

Where is the authenticator? Phone? Computer?

There is no way in hell they are brute forcing the 2 step authentication. Googles management would be holding public executions in the courtyard if there was a way for anyone, especially a non-techy type person to do this.

---

<div class="post-metadata">

**Author:** ![amorali](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@amorali](https://boards.straightdope.com/u/amorali)\
**Post date:** [July 23, 2014, 12:59am UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/31 "2014-07-23T00:59:16Z")

</div>

Oh that’s not what I meant. I was looking in old emails and found the one that led them to the contact information for my HR. There wasn’t a new episode, just more confirmation of where they got the idea and how they got the info.

---

<div class="post-metadata">

**Author:** ![tellyworth](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tellyworth](https://boards.straightdope.com/u/tellyworth)\
**Post date:** [July 23, 2014, 12:59am UTC](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116/32 "2014-07-23T00:59:50Z")

</div>

The police are unlikely to get involved unless they’re investigating some other crime.

What I’m getting at is, did you change your password and/or enable 2-step when you first suspected a problem (“months and months ago”), or only later when you started the thread? That’s one of the first questions any lawyer or investigator will ask. If it was the latter, I think you’ll find it’s far more difficult to get a satisfactory result.

[Previous page](https://boards.straightdope.com/t/hacking-gmail-without-being-detected/693116.md?page=1)
