Google has confirmed that only a small subset of the accounts in yesterday's leak were at risk -- less than 2%, according to them -- and that they have already taken necessary steps to protect those users.