More than 16 million email users in Germany have had their passwords and other details stolen.
The Federal Office for Security said criminals had infected computers with software which allowed them to gather email addresses and account passwords.
It has set up a website for people to check whether they have been victims.
The scale of the attack affects almost a fifth of the German population.