Hackers managed to compromise “a few thousand” Google Workspace accounts by circumventing the verification process.