According to this New York Times article, Google's harvesting of personal information -- including e-mails and passwords -- was intentional.

Data Harvesting at Google Not a Rogue Act, Report Finds