Theoretical Question on personal Gmail data security

[recommends]

If a person works at a company and uses their personal Gmail to log into their Confluence platform... and the company's Confluence does not use Google authentication OR two-factor authentication (2FA), could the Company potentially be posing a security risk to the person's personal Gmail data if the company gets breached?

Also...  if this is not the proper place for this question kindly recommend where might be the best place for this question.

[Nic Brough -Adaptavist-]

Welcome to the Atlassian Community!

No, Gmail is a separate system to Confluence.  A breach in one will not be a risk to the other, unless the breach is that your user shares their google account with someone else.