{"id":60985,"date":"2026-07-02T23:08:16","date_gmt":"2026-07-02T23:08:16","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5266234"},"modified":"2026-07-02T23:08:16","modified_gmt":"2026-07-02T23:08:16","slug":"dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/","title":{"rendered":"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/image.theregister.com\/248218.jpg?imageId=248218&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\" class=\"ff-og-image-inserted\"><\/div>\n<div data-element-guid=\"d11159dd-82a3-4c53-901c-d41dec75505c\" readability=\"31.678048780488\">\n<p class=\"kicker \">Cybercrime<\/p>\n<p class=\"subtitle \">Left hand, meet right hand<\/p>\n<\/p><\/div>\n<div data-element-guid=\"4c9dc5d9-c886-4348-bf4a-01d0dc71377d\" readability=\"106.81172291297\">\n<p>During a 48-hour period from June 7 to 8, developer Charles Jones&#8217;s Google Cloud account registered $11,089.77 in charges &#8211; most related to the use of Gemini image-generation models.<\/p>\n<p>Yet Jones, a solo developer who runs programmatic SEO and insurance sites, told <span class=\"italic m-italic \" data-lab-italic=\"italic\">The Register<\/span> that he doesn&#8217;t have any workflow that generates AI images.<\/p>\n<p>Google suspended his account anyway. A suspension notification sent to Jones on June 7 justified the decision by stating his account &#8220;was engaged in abusive activity consistent with hijacked resources.&#8221; <\/p>\n<p>&#8220;The root cause was attributed to a compromised <span class=\"font-RobotoCondensed \" data-lab-fontface=\"RobotoCondensed\">firebase-adminsdk<\/span> service account key,&#8221; said Jones, who provided <span class=\"italic m-italic \" data-lab-italic=\"italic\">The Register<\/span> with documentation of his exchanges with Google Cloud support.<\/p>\n<p>The notification advised Jones to report his concerns if he believed the account was compromised by a third party. He did so and took the steps required by Google to have his account reinstated. He disabled the service account and revoked the key.<\/p>\n<p>But the Google Cloud billing team has repeatedly refused to forgive the charges.<\/p>\n<p>As we <a href=\"https:\/\/www.theregister.com\/devops\/2026\/05\/15\/google-reimburses-register-sources-who-were-victims-of-api-fraud\/5241429\">reported previously<\/a>, complaints about charges arising from fraudulent API key usage among Google Cloud customers are not uncommon. In February, a developer based in Vietnam claimed that a Google Cloud API key compromise had resulted in more than <a href=\"https:\/\/www.theregister.com\/security\/2026\/03\/03\/dev-stunned-by-82k-gemini-api-key-bill-after-theft\/4925029\">$82,000 in charges over 48 hours<\/a>. A similar report claiming more than $10,000 in fraudulent charges surfaced a month later <a href=\"https:\/\/www.reddit.com\/r\/googlecloud\/comments\/1t4xkmf\/charged_10138_in_march_2026_due_to_googles\/\">on Reddit<\/a>.<\/p>\n<div data-element-guid=\"afe083ca-6701-48e9-9bd8-f8827dd7fb42\" class=\"lab4 column articleList layout_vertical imageLayout_left small-12 large-12 small-abs-12 large-abs-12 abs_grid_12 grid-vas-start mobile-grid-vas-start\">\n<div class=\"content border_width_0 border_width_mobile_0 border-radius-48 border-radius-mobile_48\">\n<h2 class=\"article-list-title t19 font-RobotoCondensed\">MORE CONTEXT<\/h2>\n<\/p><\/div>\n<\/div>\n<p>Regardless of where the fault lies \u2013 insecure practices by developers or insecure Google infrastructure \u2013 Google may choose to hold developers liable for unauthorized charges, <a href=\"https:\/\/docs.cloud.google.com\/billing\/docs\/how-to\/resolve-issues\">even if the credit-card issuing bank has reversed the charge as fraudulent<\/a>.<\/p>\n<p>At the same time, Google still hasn&#8217;t publicly released a mechanism to cap Google Cloud spending. The company <a href=\"https:\/\/cloud.google.com\/blog\/topics\/cost-management\/introducing-spend-caps-ai-cost-visibility-next26\">introduced Spend Caps<\/a> for certain services as a private preview but hasn&#8217;t made the service generally available.&nbsp;<\/p>\n<p>Other cost-limiting measures, like <a href=\"https:\/\/docs.cloud.google.com\/apis\/docs\/capping-api-usage\">API-specific usage limits<\/a> &#8220;aren&#8217;t designed to act as a project-wide spending cap.&#8221; Similarly, <a href=\"https:\/\/docs.cloud.google.com\/billing\/docs\/how-to\/budgets\">Budget Alerts<\/a> &#8220;don&#8217;t automatically prevent the use or billing of your services when the budget amount or threshold rules are met or exceeded.&#8221; Google provides <a href=\"https:\/\/docs.cloud.google.com\/billing\/docs\/how-to\/disable-billing-with-notifications\">a workaround<\/a> by allowing Budget Alert notifications to disable cloud billing, but warns that doing so means &#8220;resources might be irretrievably deleted.&#8221;<\/p>\n<p>In March, Google introduced&nbsp;<a href=\"https:\/\/blog.google\/innovation-and-ai\/technology\/developers-tools\/more-control-over-gemini-api-costs\/\">project spend caps<\/a>&nbsp;for the Gemini API as an experimental feature, but at the same time the company said that spend caps have a 10 minute delay and customers are responsible for spending during that period \u2013 so the company&#8217;s definition of cap is rather flexible.&nbsp;<\/p>\n<p>What&#8217;s more, Google said its system &#8220;now automatically upgrades you to the next [usage] tier as your usage grows and your payment history matures.&#8221; And higher tiers raise spending caps.<\/p>\n<p>This all means it can still be a challenge for Google Cloud customers to avoid unbounded financial obligations in the event of an account or API key compromise. Escaping that responsibility requires engaging with Google customer service in an opaque appeals process in which the company isn&#8217;t required to demonstrate customer negligence or an audit trail.<\/p>\n<p>&#8220;Here&#8217;s a question I can&#8217;t get answered, and I think it&#8217;s central to the whole pattern,&#8221; Jones said. &#8220;Google&#8217;s Trust &amp; Safety was quick to alert me that a service account key was compromised \u2014 but I have been given no route, anywhere, to see HOW or WHERE that key was actually exposed. There is no trace, no log path, no forensic detail offered.&#8221;<\/p>\n<p>Jones said he was the only person who had access to the VM where the compromised key resided and he insists that he followed the company&#8217;s recommended security practices.<\/p>\n<p>&#8220;So how does a single-access VM produce a leaked service account key \u2014 and why is the burden on me to prove I secured something Google itself can&#8217;t (or won&#8217;t) show me how I failed to secure? Google is invoking its Shared Responsibility Model to deny the refund, but that model assumes a customer security failure Google has never demonstrated.&#8221;<\/p>\n<p><span class=\"italic m-italic \" data-lab-italic=\"italic\">The Register<\/span> twice asked Google why it would deny a refund and what evidence it has that supports that decision. We&#8217;ve not heard back. \u00ae<\/p>\n<\/p><\/div>\n<p><img decoding=\"async\" src=\"https:\/\/image.theregister.com\/?imageId=248218&#038;width=800\">READ MORE <a href=\"https:\/\/www.theregister.com\/cyber-crime\/2026\/07\/03\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/5266234\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Left hand, meet right hand READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":60986,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[1047],"class_list":["post-60985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-cyber-crime"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-02T23:08:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/248218.jpg?imageId=248218&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway\",\"datePublished\":\"2026-07-02T23:08:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/\"},\"wordCount\":710,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg\",\"keywords\":[\"Cyber Crime\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/\",\"name\":\"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg\",\"datePublished\":\"2026-07-02T23:08:16+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg\",\"width\":100,\"height\":56},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Crime\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/cyber-crime\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/","og_locale":"en_US","og_type":"article","og_title":"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-07-02T23:08:16+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/248218.jpg?imageId=248218&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway","datePublished":"2026-07-02T23:08:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/"},"wordCount":710,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg","keywords":["Cyber Crime"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/","url":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/","name":"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg","datePublished":"2026-07-02T23:08:16+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway.jpg","width":100,"height":56},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/dev-says-google-warned-him-about-account-hijack-then-charged-him-11000-anyway\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Cyber Crime","item":"https:\/\/www.threatshub.org\/blog\/tag\/cyber-crime\/"},{"@type":"ListItem","position":3,"name":"Dev says Google warned him about account hijack \u2013 then charged him $11,000 anyway"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/60985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=60985"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/60985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/60986"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=60985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=60985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=60985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}