The passwords were not leaked from google, parts of it maybe were new, but other parts are suspected to be copied from older leaks.
The actual dump can be found if you look for it - with full passwords.
We can get a pretty good idea where they come from too by searching for emails with a + in the domain and looking at what comes after (I delete uninteresting ones - like single letters or numbers):
The passwords were not leaked from google, parts of it maybe were new, but other parts are suspected to be copied from older leaks.
The actual dump can be found if you look for it - with full passwords.
We can get a pretty good idea where they come from too by searching for emails with a + in the domain and looking at what comes after (I delete uninteresting ones - like single letters or numbers):
$ grep '+' goo.txt | cut -d+ -f2 | cut -d@ -f1 | sort | uniq -c | sort -h
[0]: https://news.ycombinator.com/item?id=8295102