The National Security Agency was able to eavesdrop on the communications of Google and Yahoo users without breaking into either company’s data centers.
Apparently calling someone and saying “I lost my password, can I use yours?” works a lot better than you’d think.