Google Search Console fired off a wave of “new owner added” emails on Monday, August 24, naming account owners who had held that access for years. Site owners spent the morning cross-checking user lists against a threat that did not exist. Google later confirmed the notifications were the product of a bug, not a compromise.
The false alerts surfaced across Google’s own Webmaster Help Forums, Reddit, and X, according to Search Engine Roundtable. One practitioner reported managing a property where the notification named a user added as owner as far back as 2021. Another, posting on X as Max Peters, described receiving more than two dozen new-owner notices in a single morning, every one referencing an existing owner rather than an actual new one. A separate X user, posting as Chris Riley, called the pattern indistinguishable from “a fantastic phishing campaign.”
That comparison is the useful part. A false ownership alert and a genuine account takeover generate the exact same email, at the exact same moment, with the same subject line reading “new owner.” Search Console gives the recipient no built-in way to tell the two apart from the notification alone. The only way to resolve the ambiguity is to open the property and check who is actually listed, which is precisely what practitioners across the forums, Reddit, and X did on Monday.
That verification step is not wasted effort even when the alert turns out to be a bug. Search Console ownership controls who can submit sitemaps, request indexing, and view performance and security data for a domain. A team that skips the check because “it’s probably that bug from August” is applying exactly the kind of pattern-matching that makes phishing work. The correct response to an unexplained new-owner email is the same regardless of cause: open the Users and Permissions panel, confirm every listed owner and verified user is one your team recognizes, and check for any unfamiliar verification tokens or delegated access tied to third-party tools.
Google’s fix here was a confirmation, not a technical explanation. Search Engine Roundtable’s report does not include any detail on what triggered the false notifications or whether Google plans a follow-up statement describing the root cause. That gap matters, because a bug that misfires on ownership data once is worth watching for whether it recurs during other Search Console maintenance windows.
For any team that received one of these emails, the sensible move is not to dismiss the alert as noise once Google’s bug confirmation is public. It is to treat the incident as a free fire drill: verify the current owner and user list in Search Console now, document who should have access, and set an internal norm that any future new-owner notification gets a same-day audit through a second channel, such as confirming with the person named in the email, before anyone assumes it is another glitch.
Reported by Barry Schwartz for Search Engine Roundtable on August 24, 2026.
