The search giant said that it had taken immediate action to safeguard the affected accounts.
Phishing involves using fake websites to lure people into revealing data such as bank account details or login names.
BBC News has seen two lists that detail more than 30,000 names and passwords that have been posted online.