Hack into Gmail

Actually, thanks to a note from Albert Houseman, I just figured out what might well have happened to you, and it's a sneaky hack that involves just as much social engineering as computer trickery. The key is that you got an invitation from someone you didn't know...

Here's how someone who had malicious intent could set you up with a Gmail account and then later hack into your new mailbox and contact list:

First, they need a secondary account that isn't a Gmail address. A Yahoo or Hotmail address would work fine.

Now, when they generate an invitation for you, they type in your first and last name, but their email address.

The invitation is sent to them and they forward it along to you, cut and paste it into a friendly response to your request ("Try this link for an account:") or even just redirect the message so it appears to have come directly from Gmail.

But what's different now is that the secondary email address is theirs, not your non-Gmail account:

You sign up, fill in the fields indicated on the Gmail signup form, leave that without thinking because "heck, it's probably just a referral" or similar, and then use your Gmail account without thinking about it