Google has confirmed that it unwittingly disclosed personal information from more than a dozen users recently.

The data, including password and login information, came from Google Toolbar users who submitted the URLs of suspected phishing sites, VNUnet reports. Google said the problem has since been fixed and login information will be removed from future submissions.

Security firm Finjan claims it first notified Google of the problem on Jan. 3, and the firm has verified that the list has since been cleaned of any sensitive user information. Users whose information was compromised were notified weeks ago.