The leaking via gmail has an issue:
In many cases when creating a new gmail account, you have to provide a phone number for an automatic text verification code.
In many cases when creating a new gmail account, you have to provide a phone number for an automatic text verification code.
I wonder what triggers it, maybe if a lot of different Google Accounts log in from that single IP, it assumes it's some open coffeeshop wifi or similar?