Google has confirmed that its email verification system was bypassed. In other words, the malicious actors were able to circumvent security protocols.